PT-2018-4157
CVE-2014-10068
·
تاريخ النشر
2018-05-29
·
تاريخ التحديث
2020-08-31
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
inert versions prior to 1.1.1
Description
The issue concerns an information leakage problem where files in hidden directories are served even when
showHidden is set to false. This is due to the inert directory handler always allowing access to these files, regardless of the showHidden setting.Recommendations
Update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to hidden directories until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾