Debian/erlang: high 7.5
Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used.
Action: Upgrade erlang to 1:23.1+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:23.1+dfsg-1 | - |
Fixed versions
| 1:23.1+dfsg-1 |
Sources
published · modified · JSON