{"cvss":0.0,"datePublished":"2023-11-26T00:00:00Z","dateUpdated":"2023-11-26T00:00:00Z","description":"A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40.","dueDate":"","id":"CVE-2019-12276","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"grandnode","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"grandnode grandnode Improper Limitation of a Pathname to a Restricted Directory","vendor":"grandnode"}