CVE-2019-25087

Medium

Description

A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp of the component URI Handler. The manipulation of the argument uri leads to path traversal: '../filedir'. The attack may be initiated remotely. The name of the patch is 1a0de56e4dafff9c2f9c8f6b130a764f7a50df52. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216863.

SeverityMedium

CVSS5.3

Exploit probability—

ProductHttpserver

PublishedDec 27, 2022

First seenDec 27, 2022

Weakness typeCWE-24CWE-24

How to fix

Update

httpserver_project httpserver2019-09-08 or later

Patches

github.com/RamseyK/httpserver/commit/1a0de56e4dafff9c2f9c8f6b130a764f7a50df52

Affected products

Product	Affected versions	Fixed in
httpserver_project httpserver	v < 2019-09-08	2019-09-08

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.