CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.

Affected products

Yaws

Yaws

= 1.91

Fix

Available

CVSS 3.1

6.5 MEDIUM

EPSS

16.1% (97th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2019-11-26