exploitDog

CVE-2017-16762

Опубликовано: 10 нояб. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

Ссылки

https://github.com/channelcat/sanic/issues/633
Exploit
Third Party Advisory
https://github.com/channelcat/sanic/releases/tag/0.5.1
Release Notes
Third Party Advisory
https://github.com/channelcat/sanic/issues/633
Exploit
Third Party Advisory
https://github.com/channelcat/sanic/releases/tag/0.5.1
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sanic_project:sanic:*:*:*:*:*:*:*:*

Версия до 0.5.0 (включая)

EPSS

Процентиль: 52%

0.00289

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-mpmf-hr8p-p49g

CVSS3: 7.5

github

больше 3 лет назад

Sanic arbitrary file read and directory traversal

EPSS

Процентиль: 52%

0.00289

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22