CVE-2016-1231

Severity CVSS v4.0:
Pending analysis
Type:
CWE-22 Path Traversal
Publication date:
12/01/2016
Last modified:
12/04/2025

Description

Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) in an unspecified path.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.0:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.2:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.3:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.4:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.5:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.6:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.7:*:*:*:*:*:*:*
cpe:2.3:a:prosody:prosody:0.9.8:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*