high7.5
CVE-2019-15516
Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring.
Impact
Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cuberite | Cuberite | before 2019-06-11 |