tocsin

Debian/kodi: high 7.5

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by i

Action: Upgrade kodi to 2:18.6+dfsg1-1 or later.

Affected

introducedfixedlast affected
02:18.6+dfsg1-1-

Fixed versions

2:18.6+dfsg1-1

Sources

published · modified · JSON