Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-17199
7.5
HIGHCVSS v3
Published
October 5, 2019
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as demonstrated by the a.jpg\.. substring.
GitHub