critical9.8
CVE-2022-48253
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server.
Impact
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nazgul | Nostromo | before 2.1 |