Inedo Otter
2 CVEs affecting Inedo Otter. Latest disclosed: 2017-12-01. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17086 | Critical | 9.8 | 2017-12-01 | Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or po… |
CVE-2017-15607 | Critical | 9.8 | 2017-12-01 | Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181. |