Threats tagged 'ghsa-c9x8-vr23-rm4c'

A path traversal vulnerability exists in the GetListDirectory function of the HNAP Handler component in D-Link DIR-878 firmware version 1.20B05. This flaw allows remote attackers to manipulate the ListDirectoryPath argument to access unauthorized directories. The affected product is no longer supported by the vendor. Public exploit code is available. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity.