Описание
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | released | 0.2.0-2ubuntu1 |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | released | 0.2.0-2ubuntu1 |
| esm-apps/noble | released | 0.2.0-2ubuntu1 |
| esm-apps/resolute | released | 0.2.0-2ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| focal | ignored | end of standard support, was needed |
| groovy | ignored | end of life |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (o ...
Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.
Уязвимость клиент чата XMPP Dino, связанная с недостатками ограничения имени пути к каталогу, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2021-1945: package `dino` update to version 0.2.1-alt1
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3