Tag
path-traversal
3 articles
- Path traversal in mistune's Include directive allows reading arbitrary files outside the intended markdown directory. Affects all versions up to 3.1.4, fixed in 3.3.0.
- Path traversal vulnerability in uniget CLI v0.27.3 allows local users to access and modify arbitrary files via directory escape sequences in hook filenames.
- Unauthenticated LFI in Bagisto allows arbitrary file read via path traversal without authentication. Disclosed via CERT-In and assigned CVE-2026-9506.