Описание
Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").
Ссылки
- Exploit
- Exploit
- US Government Resource
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:mongrel:mongrel:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mongrel:mongrel:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mongrel:mongrel:1.1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 84%
0.02124
Низкий
6.4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
ubuntu
почти 18 лет назад
Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").
debian
почти 18 лет назад
Directory traversal vulnerability in DirHandler (lib/mongrel/handlers. ...
github
больше 3 лет назад
Mongrel vulnerable to directory traversal via double-encoded sequences
EPSS
Процентиль: 84%
0.02124
Низкий
6.4 Medium
CVSS2
Дефекты
CWE-22