GHSA-4r64-wf76-c53pHighCVSS 7.5

In blynk-server a Directory Traversal exists

Published
October 17, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-17785 →

📋 Description

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.

🎯 Affected products1

  • maven/com.github.blynkkk:blynk-server:< 0.39.7

🔗 References (4)