CVEs-PoC/2011/CVE-2011-1589.md

CVE-2011-1589

Description

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.

POC

Reference

• https://github.com/kraih/mojo/issues/114

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/briandfoy/cpan-security-advisory
• https://github.com/vti/cpan-security-advisory