CVE-2021-23514.md

CVE-2021-23514

Description

This affects the package Crow before 0.3+4. It is possible to traverse directories to fetch arbitrary files from the server.

POC

Reference

• https://snyk.io/vuln/SNYK-UNMANAGED-CROW-2336163

Github

No PoCs found on GitHub currently.