Summary: Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths.Published: Tuesday, May 5, 2020 - 01:15cvss: 5.0