Skip to content
OpenAdvisories

Package · Go

github.com/ThomasLeister/prosody-filer

1 known vulnerabilities.

1 result · Feed

  • High —

    Listing of upload directory contents possible

    There's an security issue in prosody-filer versions **< 1.0.1** which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other tha…