Launchpad.net

CVE 2019-8358

In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled.

See the CVE page on Mitre.org for more details.

References