Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with .. (dot-dot) sequences containing URL-encoded forward slash (%2F) characters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webserver_4_all | Radiobird_software | 1.23 (including) | 1.23 (including) |
| Webserver_4_all | Radiobird_software | 1.27 (including) | 1.27 (including) |