TI-2010-02378 CVE-2010-2476 · GHSA-rw9p-4whq-876wImproper input validation in syscpPriority MEDIUM 46syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01725 · Published 2019-11-07 · No fix listed CWE-20