tocsin

Debian/geshi: unknown

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-

Action: Upgrade geshi to 1.0.8.4-2 or later.

Affected

introducedfixedlast affected
01.0.8.4-2-

Fixed versions

1.0.8.4-2

Sources

published · modified · JSON