2018-04-20 22:29:00 2018-05-22 17:02:17

The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory.