CVE-2014-5269

CVE-2014-5269 describes a path traversal vulnerability in Plack::App::File within Plack versions prior to 1.0031. This flaw allows remote attackers to bypass file whitelists and access sensitive information by manipulating paths with trailing slashes, particularly when used with Plack::Middleware::Static. With a CVSS score of 5.0 (medium severity), this vulnerability has a low attack complexity and requires no authentication, potentially leading to information disclosure. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.