In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-09-30T15:00:00Z
Updated: 2024-09-16T17:09:11.584Z
Reserved: 2018-09-30T00:00:00Z
Link: CVE-2018-17785
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-09-30T15:29:00.277
Modified: 2018-12-31T17:41:03.760
Link: CVE-2018-17785
Redhat
No data.