CVE-2021-23423

Опубликовано: 16 авг. 2021

Источник: nvd

CVSS3: 5.5

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output.

Ссылки

https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
Patch
Third Party Advisory
https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647
Exploit
Patch
Third Party Advisory
https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd
Patch
Third Party Advisory
https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bikeshed_project:bikeshed:*:*:*:*:*:*:*:*

Версия до 3.0.0 (исключая)

EPSS

Процентиль: 57%

0.00353

Низкий

5.5 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2021-23423

CVSS3: 5.5

ubuntu

больше 4 лет назад

GHSA-hf6p-4rv2-9qrp

CVSS3: 5.5

github

больше 4 лет назад

Path Traversal in bikshed

EPSS

Процентиль: 57%

0.00353

Низкий

5.5 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22