CVE-2016-10528

restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.

CVSS v3.0

4.9 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

1.20% chance of exploitation in the next 30 days, 66th percentile

Published

2018-05-31

Updated

2024-09-17

Proof-of-concept exploits (1)

• advisories/GHSA-xg5r-8j97-2wrj

References

• CVE Record
• NVD entry

Related

• CVE-2016-10523
• CVE-2016-10531
• CVE-2016-10521
• CVE-2016-10533
• CVE-2016-10520
• CVE-2016-10538