Threats tagged 'ghsa-p249-34gr-hj2h'

Munin munin-httpd versions 2.99.1 through 2.999.18 have a path traversal vulnerability in the static file handler. This flaw allows unauthenticated attackers to read arbitrary files outside the intended static directory by exploiting a bypass in the '/../' substring check. Sensitive configuration files such as munin.conf and plugin-conf.d, which may contain monitored service credentials, can be accessed.