CVE-2018-17785: Path Traversal
In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17785?
CVE-2018-17785 is considered a medium severity vulnerability due to the potential for directory traversal leading to sensitive information disclosure.
How do I fix CVE-2018-17785?
To fix CVE-2018-17785, upgrade blynk-server to version 0.39.7 or later where the vulnerability has been patched.
What software is affected by CVE-2018-17785?
CVE-2018-17785 affects blynk-server versions prior to 0.39.7.
What is a directory traversal vulnerability like CVE-2018-17785?
A directory traversal vulnerability like CVE-2018-17785 allows an attacker to access files and directories that are outside the intended directory structure.
Can CVE-2018-17785 lead to data breaches?
Yes, CVE-2018-17785 can potentially lead to data breaches by allowing unauthorized access to sensitive files such as /etc/passwd.