CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed

published November 26, 2019

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16142 · 96.9th percentile
Published
2019-11-26T04:49Z
EPSS history
Timeline
  • 26 NOV 04:49Z
    Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed
    cvelistv5