Lucene search
K

CVE-2021-23357 Directory Traversal

🗓️ 15 Mar 2021 16:45:19Reported by snykType 
cvelist
 cvelist
🔗 www.cve.org👁 16 Views

All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function, allowing arbitrary deletion and re-creation of JSON files

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2021-23357
15 Mar 202116:40
attackerkb
CNNVD
Tomas Buchaillot Tyk API Gateway 路径遍历漏洞
15 Mar 202100:00
cnnvd
CVE
CVE-2021-23357
15 Mar 202116:45
cve
EUVD
EUVD-2021-10427
7 Oct 202500:30
euvd
NVD
CVE-2021-23357
15 Mar 202117:15
nvd
OSV
CVE-2021-23357
15 Mar 202117:15
osv
Prion
Directory traversal
15 Mar 202117:15
prion
Snyk
Directory Traversal
19 Nov 202015:06
snyk
Veracode
Arbitrary File Delete
16 Mar 202101:23
veracode
[
  {
    "product": "github.com/TykTechnologies/tyk/gateway",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Mar 2021 16:45Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.13.3
EPSS0.00525
16