CVE-2018-14056

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories

published July 15, 2018

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02017 · 80.8th percentile
Published
2018-07-15T01:00Z
EPSS history
Timeline
  • 15 JUL 01:00Z
    ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories
    cvelistv5