Prompted by recent exploitation in critical infrastructure attacks

Prompted by recent exploitation in critical infrastructure attacks

2 weeks ago
Anonymous $6hYC3Wwiad

https://www.bleepingcomputer.com/news/security/cisa-urges-software-devs-to-weed-out-path-traversal-vulnerabilities/

​CISA and the FBI urged software companies today to review their products and eliminate path traversal security vulnerabilities before shipping.

Attackers can exploit path traversal vulnerabilities (also known as directory traversal) to create or overwrite critical files used to execute code or bypass security mechanisms like authentication.