Skip to content
OpenAdvisories

Package · PyPI

xrootd

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-vj8v-p5vw-m6v5

    xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." pattern

    ## Summary A path traversal vulnerability in XRootD allows users to escape the exported directory scope and enumerate the contents of the parent directory by appending `/..` (specifically without trailing slash) to an exported path in `xrdfs ls` or `HTTP PROP…

    xrootd PyPI