Описание
Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.29.4 (исключая)
cpe:2.3:a:vapor_project:vapor:*:*:*:*:*:swift:*:*
EPSS
Процентиль: 68%
0.00567
Низкий
8.5 High
CVSS3
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
больше 2 лет назад
Arbitrary file read using percent-encoded relative paths in FileMiddleware
EPSS
Процентиль: 68%
0.00567
Низкий
8.5 High
CVSS3
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22