Description
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
Exploits (1)
exploitdb
WORKING POC
by PizzaHatHacker · pythonlocalmultiple
https://www.exploit-db.com/exploits/39656
References (3)
Scores
CVSS v3
7.4
EPSS
0.1302
EPSS Percentile
94.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Details
CWE
CWE-22
Status
published
Products (1)
hexchat_project/hexchat
2.11.0
Published
Jan 18, 2017
Tracked Since
Feb 18, 2026