Threats tagged 'ghsa-85rf-xh54-whp3'

A path traversal vulnerability (CVE-2024-22050) exists in iodine's static file server that allows malicious URL crafting to access files outside the intended public folder. This affects iodine versions prior to 0.7.34. The vulnerability has been patched in version 0.7.34. Users are advised to upgrade to this version or later. As a workaround, disabling the static file service and using alternative methods like nginx to serve static files can mitigate the issue.