https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:55:09 +0000 https://cve.radiocsirt.org/vuln/cve-2018-19052 <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> <p>An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing &#39;/&#39; character, but the alias target filesystem path does have a trailing &#39;/&#39; character.</p> https://cve.radiocsirt.org/vuln/cve-2018-19052