Directory Traversal Vulnerability in S3Scanner before 2.0.2

Directory Traversal Vulnerability in S3Scanner before 2.0.2

CVE-2021-32061 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element.

Learn more about our Web Application Penetration Testing UK.