TI-2018-15406 CVE-2018-25181 · GHSA-7x79-6w56-ww2pMusicco 2.0.0 Arbitrary Directory Download via Path TraversalPriority HIGH 77Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00719 · Published 2026-03-06 · No fix listed CWE-22