CVE-2023-31477
A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, be…
Published: 2023-05-11 · CVSS: 7.5 · CVSS 3.1
A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7