CVE-2018-17785

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-09-30

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Blynk-server (Blynk)

References

• https://github.com/blynkkk/blynk-server/issues/1256
• https://github.com/blynkkk/blynk-server/releases/tag/v0.39.7