CVE-2017-10974

CVE-2017-10974

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on this product.

CVSS 7.5 · High · EPSS 81.2% · Public exploit · Fix available

Published

2017-07-07T11:00:00.000Z

Updated

2024-08-05T17:57:57.172Z

Stack: system

Check your server →