This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2022-01-13T14:10:13.102808Z
Updated: 2024-09-16T19:10:37.111Z
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23514
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-01-13T14:15:07.707
Modified: 2024-11-21T05:51:48.750
Link: CVE-2021-23514
Redhat
No data.