VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Jan 12, 2016· Updated Jun 17, 2026

CVE-2016-1231

CVE-2016-1231

Description

Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) in an unspecified path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Prosody/Prosody10 versions
    cpe:2.3:a:prosody:prosody:0.9.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:prosody:prosody:0.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.6:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.7:*:*:*:*:*:*:*
    • cpe:2.3:a:prosody:prosody:0.9.8:*:*:*:*:*:*:*
    • (no CPE)range: <0.9.9
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/prosody&distro=openSUSE%20Tumbleweed
    Range: < 0.9.11-1.1

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.