Permalink
CVE-2026-1616
7.5 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): NONE
- Availability impact (A): NONE
osim: Path Traversal via query parameters in Nginx configuration
The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.
Affected products
osim
- <v2025.9.0
Matching in nixpkgs
pkgs.gosimports
Simpler goimports
pkgs.pyrosimple
RTorrent client
Package maintainers
-
@maolonglong Shaolong Chen <shaolong.chen@outlook.it>
-
@vamega Varun Madiath <github@madiathv.com>