Skip to content
OpenAdvisories
Unscored CVE-2022-28380 EUVD-2022-32825GHSA-8vp4-x4mx-xq42

The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is used.

Published Apr 3, 2022 · Updated Aug 3, 2024 · Assigned by mitre