Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00921·Published 2024-01-04·Fixed in 0.7.33, 0.7.34CWE-22
