CVE-2007-6612

Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary…

published January 3, 2008

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03003 · 87.3th percentile
Published
2008-01-03T22:00Z
EPSS history
Timeline
  • 03 JAN 22:00Z
    Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary…
    cvelistv5