- Vendor / Project
- Nostromo
- Product
- nhttpd
- Date added
- Nov 7, 2024
- Due date
- Nov 28, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-22
Description
Nostromo nhttpd contains a directory traversal vulnerability in the http_verify() function in a non-chrooted nhttpd server allowing for remote code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.