tocsin

Debian/libmojolicious-perl: unknown

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.

Action: Upgrade libmojolicious-perl to 1.16-1 or later.

Affected

introducedfixedlast affected
01.16-1-

Fixed versions

1.16-1

Sources

published · modified · JSON