Skip to content
OpenAdvisories

Package · Debian

utox

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers

    uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume…