Vulnerability in the muhttpd HTTP server, allowing access to files outside of the working directory
A vulnerability (CVE-2022-31793) has been discovered in the muhttpd HTTP server, which is primarily used in routers and access points. This vulnerability allows an unauthenticated attacker to upload arbitrary files by sending a specially crafted HTTP request, depending on the access rights under which the HTTP server is running (in many devices, muhttpd runs with root privileges). For instance, an attacker could gain access to files containing passwords, wireless settings, connection parameters […]
