UpHeron
All vulnerabilities

Servers and applications

CVE-2020-25623

Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used.

Severity
High 7.5
Published
2 Oct 2020
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Fixed in
22.3.4.6, 23.1
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 22.3.0 before 22.3.4.6
  • From 23.0.0 before 23.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-25623
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-25623