2021-11-29 03:00:48
mitre
PUBLISHED
S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element.