CVE 2018-14056

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.

Related bugs and status

CVE-2018-14056 (Candidate) is related to these bugs:

Bug #1781925: Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056

		In	Importance	Status
1781925	Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056	znc (Ubuntu)	Medium	Fix Released
1781925	Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056	znc (Ubuntu Bionic)	Medium	Fix Released
1781925	Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056	znc (Ubuntu Xenial)	Medium	Fix Released
1781925	Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056	znc (Ubuntu Artful)	Medium	Won't Fix
1781925	Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056	znc (Ubuntu Trusty)	Medium	Fix Released
1781925	Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056	znc (Ubuntu Cosmic)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.