TI-2012-05447 CVE-2012-10024 · GHSA-4754-xhrr-vjvp
XBMC ≤ 11.0 Web Server Path Traversal
Priority HIGH 70
XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server.
No XBMC vulnerabilities are listed in CISA KEV.
2 records
XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server.
XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file.