high7.5
CVE-2020-25623
Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal.
Impact
Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Erlang | Erlang\/Otp | from 22.3.0 before 22.3.4.6 from 23.0.0 before 23.1 |