GHSA-2g52-w93h-w9v5MediumCVSS 5.3

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy...

Published
July 30, 2026
Last Modified
July 30, 2026

🔗 CVE IDs covered (1)

📋 Description

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service.

🔗 References (4)