Path Traversal Vulnerability in Drogon Affected by Input Validation Flaw

CVE-2021-35397

What is CVE-2021-35397?

A path traversal vulnerability exists in the static router of Drogon, which allows unauthenticated attackers to read arbitrary files. The issue arises from insufficient input validation when processing requested paths. By sending specially crafted HTTP requests to the server, an attacker could manipulate the path to access files that are intended to be protected, leading to potential exposure of sensitive information. It is crucial for users of affected Drogon versions to take immediate action to mitigate this risk.

References