Skip to content
OpenAdvisories

Vendor

Novik

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.9

    ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following

    ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape the topDirectory jail because correctDirectory() does not resolve symbolic links. Attackers can submit a datadir path through a sym…