CVE-2014-10073

HIGH 7.5CVE-2014-10073 · Published 20/04/2018 · updated 17/06/2026

In short

CVE-2014-10073 is a HIGH (CVSS 7.5) vulnerability affecting psensor (wpitchoune).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
Fix: update to 1.1.4 or later.

Package	Affected versions	Patched versions
psensor wpitchoune	`< 1.1.4`	`1.1.4`

Description

The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory.

References

git.wpitchoune.net/gitweb
git.wpitchoune.net/gitweb
git.wpitchoune.net/gitweb
lists.debian.org/debian-lts-announce/2018/04/msg00026.html · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free