CVE-2011-4350

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.

• CWE-22

• https://access.redhat.com/security/cve/cve-2011-4350Broken Link
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650009Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4350Exploit, Issue Tracking, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-4350Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/11/25/7Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2011-4350Broken Link
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650009Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4350Exploit, Issue Tracking, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-4350Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/11/25/7Mailing List, Third Party Advisory

Published

Nov 26, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4344Cross-site scripting (XSS) vulnerability in Jenkins Core in …
• CVE-2011-4345Cross-site scripting (XSS) vulnerability in Namazu before 2.…
• CVE-2011-4346Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2011-4347The kvm_vm_ioctl_assign_device function in virt/kvm/assigned…
• CVE-2011-4348Race condition in the sctp_rcv function in net/sctp/input.c …
• CVE-2011-4349Multiple SQL injection vulnerabilities in (1) cd-mapping-db.…
• CVE-2011-4351Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, …
• CVE-2011-4352Integer overflow in the vp3_dequant function in the VP3 deco…
• CVE-2011-4353The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3)…
• CVE-2011-4354crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platf…
• CVE-2011-4355GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scrip…
• CVE-2011-4356Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 b…