CVE-2022-28380

CVE-2022-28380

The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is used.

Source: CVE-2022-28380