CVE:CVE-2007-2747
CNNVD:CNNVD-200705-362
rdiffWeb 的rdw_helpers.py中存在目录穿越漏洞。远程攻击者可以借助提交到/browse URI的路径参数中的..，读取任意文件。
solution:Upgrade rdiffweb rdiffweb to a higher version than 0.3.5,0.1,0.2,0.3,0.3.1,0.3.2,and avoid the version (,0.3.5],0.1,0.2,0.3,0.3.1,0.3.2