Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.

Published May 28, 2023 · Updated Jan 13, 2025 · Assigned by mitre