p PatchFirst

CVE-2011-4350

CVE-2011-4350

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.

CVSS 6.5 · Medium · EPSS 16.1% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • yaws

    Versions
    • 1.91: Affected

    No fix published

  • yaws Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.91-2

    Update to 1.91-2

  • yaws Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.91-2

    Update to 1.91-2

  • yaws Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.91-2

    Update to 1.91-2

Original sources

Check your server →