CVE-2013-2182 The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
MediumCVSS 5.8
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| monkey-project monkey | <= 1.4.0 | No fix listed |
References
- bugs.monkey-project.com
- 94287 vdb-entry
- 53638 third-party-advisory
- [oss-security] 20130614 Re: CVE request: Bypass protected directory by Monkey HTTPD - Mandril security plugin mailing-list
- 60569 vdb-entry
- github.com exploit patch
- github.com exploit