tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.
CVE Status: Modified
No CVSS data available
Exploit-db Github