Security Advisory
CVE-2022-28380
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is used.