TI-2021-22759 CVE-2021-48011 · GHSA-pcvv-rm69-6cv3
Path traversal in Servor lets unauthenticated attackers read files
Priority MEDIUM 44
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments.