Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust `join` method without checking user input might have made it abe to do a Path Traversal attack causing to read more files than allowed. This is fixed in version 0.2.0.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2021-01-20T17:50:34
Updated: 2024-08-03T18:09:14.980Z
Reserved: 2020-12-22T00:00:00
Link: CVE-2021-21269
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-01-20T18:15:12.627
Modified: 2021-01-27T15:31:24.297
Link: CVE-2021-21269
Redhat
No data.