https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:33:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02904 bdu:2020-02904 https://cve.radiocsirt.org/vuln/bdu:2020-02904 https://cve.radiocsirt.org/vuln/euvd-2026-69574 EUVD-2026-69574 https://cve.radiocsirt.org/vuln/euvd-2026-69574 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19052 <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-19052 https://cve.radiocsirt.org/vuln/ghsa-f959-jhqc-rqpv <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> https://cve.radiocsirt.org/vuln/ghsa-f959-jhqc-rqpv https://cve.radiocsirt.org/vuln/gsd-2018-19052 gsd-2018-19052 https://cve.radiocsirt.org/vuln/gsd-2018-19052 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2347-1 <p>Security update for lighttpd</p> <p>Security update for lighttpd</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:2347-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19052 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lighttpd, Ubuntu:Pro:16.04:LTS: lighttpd, Ubuntu:Pro:18.04:LTS: lighttpd</p> <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lighttpd, Ubuntu:Pro:16.04:LTS: lighttpd, Ubuntu:Pro:18.04:LTS: lighttpd</p> <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-19052