Description
bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bash_history. This issue has been patched in version 1.4.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| xddxdd | bird-lg-go | < 1.4.7 | — |