PT-2018-4157

CVE-2014-10068

·

Published

2018-05-29

·

Updated

2020-08-31

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions inert versions prior to 1.1.1
Description The issue concerns an information leakage problem where files in hidden directories are served even when showHidden is set to false. This is due to the inert directory handler always allowing access to these files, regardless of the showHidden setting.
Recommendations Update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to hidden directories until the update is applied.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-G4XP-36C3-F7MR
Found an issue in the description? Have something to add? Feel free to write us 👾