An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL.
Weakness
A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint’s features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| White-jotter | Antabot | 0.2.2 (including) | 0.2.2 (including) |