← All advisories

Medium severity5.3NVD Advisory· Published Jul 15, 2018· Updated Jun 17, 2026

CVE-2018-14056

CVE-2018-14056

Description

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Znc/Zncllm-fuzzy
Range: <1.7.1-rc1
osv-coords
pkg:rpm/opensuse/znc&distro=openSUSE%20Tumbleweed
Range: < 1.8.2-1.11

Patches

Vulnerability mechanics

References

3

github.com/znc/znc/commit/a4a5aeeb17d32937d8c7d743dae9a4cc755ce773nvdPatchThird Party Advisory
security.gentoo.org/glsa/201807-03nvdThird Party Advisory
www.debian.org/security/2018/dsa-4252nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.