The host is running Mojolicious and is prone to directory traversal vulnerability.

Successful exploitation will allow attacker to obtain sensitive information that could aid in further attacks. Impact Level: Application

Upgrade to Mojolicious version 1.16 or later. For updates refer to http://www.mojolicious.org/

The flaw is due to an error in 'Path.pm', which allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.

Mojolicious versions prior to 1.16.

• http://osvdb.org/71850
• http://secunia.com/advisories/44051
• http://xforce.iss.net/xforce/xfdb/66830
• https://bugzilla.redhat.com/show_bug.cgi?id=697229

---

Updated on 2015-03-25