Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2020-29600
HistoryDec 07, 2020 - 8:15 p.m.

CVE-2020-29600

2020-12-0720:15:00
Alpine Linux Development Team
security.alpinelinux.org
13

0.002 Low

EPSS

Percentile

60.8%

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.

OSVersionArchitecturePackageVersionFilename
Alpine3.10-mainnoarchawstats< 7.8-r0UNKNOWN
Alpine3.11-mainnoarchawstats< 7.8-r0UNKNOWN