| Package | Affected versions | Patched versions |
|---|---|---|
| libsoup | = 2.0= 2.2= 2.2.0= 2.2.1= 2.2.100= 2.2.101= 2.2.102= 2.2.103= 2.2.104= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.6.1= 2.2.7= 2.2.91= 2.2.92= 2.2.93= 2.2.94= 2.2.95.1= 2.2.96= 2.2.97= 2.2.98= 2.2.99= 2.23.1= 2.23.6= 2.23.91= 2.23.92= 2.24.0.1= 2.24.1= 2.25.2= 2.25.3= 2.25.4= 2.25.5= 2.25.91= 2.26.0= 2.26.1= 2.27.1= 2.27.2= 2.27.4= 2.27.5= 2.27.90= 2.27.91= 2.27.92= 2.28.0= 2.28.1= 2.29.3= 2.29.5= 2.29.6= 2.29.90= 2.29.91= 2.3.0.1= 2.3.2= 2.3.4= 2.30.0= 2.30.1= 2.31.2= 2.31.6= 2.31.90= 2.31.92= 2.32.0= 2.32.1= 2.32.2= 2.33.4= 2.33.5= 2.33.6= 2.33.90= 2.33.92= 2.34.0= 2.34.1= 2.4.0= 2.4.1≤ 2.35.3 |
Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free