Launch Week Day 1: Announcing Security Design Review
UNKNOWN RubyGems

Duplicate Advisory: Malicious URL drafting attack against iodines static file server may allow path traversal

GHSA-qwf7-rv77-fcr3

Published ยท Modified

Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-85rf-xh54-whp3. This link is maintained to preserve external references.

Original Description

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

Ready to move

Start Securing

Free, no credit card | First findings in minutes