| Package | Affected versions | Patched versions |
|---|---|---|
| gnump3d | = 2.9= 2.9.1= 2.9.2= 2.9.3= 2.9.4= 2.9.5 |
Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free