CVE-2018-7171

PoC ×2—

CVSS 3.0

7.5 high

EPSS

28%p98

Published

Mar 30, 2018 (Mar 30, 2018)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot) in the contentbase parameter to rpc/set_all.

Vendors: lynxtechnology
Products: twonky server
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (27.9%)

In the news0 stories

No ingested article mentions this CVE yet.