CISA expects devs to squash old directory traversal bugs

Directory traversal vulnerabilities persist despite known mitigation approaches for over two decades, leading to data theft and system compromises, as highlighted by recent high-profile exploits.

CISA emphasizes that technology manufacturers must treat user-supplied content as potentially malicious to protect customers effectively from directory traversal exploits.

Read at Theregister