Summary
Buffy is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit this vulnerability to download and delete local files in the context of the webserver process which may aid in further attacks.
Buffy 1.3 is vulnerable
prior versions may also be affected.
References
Updated on 2015-03-25
