CVE-2011-4350

2019-11-2604:49:52

redhat

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.174 Low

EPSS

Percentile

96.1%

JSON

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.

CNA Affected

[
  {
    "product": "yaws",
    "vendor": "yaws",
    "versions": [
      {
        "status": "affected",
        "version": "1.91"
      }
    ]
  }
]