Опубликовано: 26 фев. 2018
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 5
CVSS3: 7.5
Описание
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | released | 2.0.15-10.2ubuntu2.1 |
| devel | not-affected | 2.0.15-10.4 |
| esm-apps-legacy/xenial | released | 2.0.12-5ubuntu3.2 |
| esm-apps/bionic | released | 2.0.15-10.2ubuntu2.1 |
| esm-apps/xenial | released | 2.0.12-5ubuntu3.2 |
| esm-infra-legacy/trusty | released | 1.9.17.1-5ubuntu0.1 |
| precise/esm | DNE | |
| trusty | released | 1.9.17.1-5ubuntu0.1 |
| trusty/esm | released | 1.9.17.1-5ubuntu0.1 |
Показывать по
10
EPSS
Процентиль: 99%
0.69423
Средний
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
больше 8 лет назад
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.
CVSS3: 7.5
debian
больше 8 лет назад
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the ...
CVSS3: 9.8
altlinux
почти 7 лет назад
ALT-PU-2019-3150: package `uwsgi` update to version 2.0.18-alt1
EPSS
Процентиль: 99%
0.69423
Средний
5 Medium
CVSS2
7.5 High
CVSS3