Droppy Project Droppy
2 CVEs affecting Droppy Project Droppy. Latest disclosed: 2020-11-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10529 | High | 8.8 | 2018-05-31 | Droppy versions <3.5.0 does not perform any verification for cross-domain websocket requests. An attacker is able to make a specially crafted page that can sen… |
CVE-2020-7757 | Medium | 6.5 | 2020-11-02 | This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server. |