CVE-2018-16485: M-Server Project M-Server

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Path Traversal vulnerability in module m-server <1.4.1 allows malicious user to access unauthorized content of any file in the directory tree e.g. /etc/passwd by appending slashes to the URL request.

Affected products

• M-Server Project M-Server: before 1.4.1 (fixed in 1.4.1)

Published 2019-02-01. Last modified 2026-06-17.