Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2023-29159

🗓️ 01 Jun 2023 00:00:00Reported by Debian Security Bug TrackerType 
debiancve
 debiancve🔗 security-tracker.debian.org👁 28 Views

Directory traversal vulnerability in Starlette allows remote unauthenticated attacker to view files in web servic

Related
Packages
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2024.
2 Feb 202408:25
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 23.0.2-IF001
19 Feb 202416:38
–ibm
ATTACKERKB		CVE-2023-29159
1 Jun 202302:15
–attackerkb
BDU FSTEC		The vulnerability of Starlette’s tools for creating asynchronous web services in Python lies in the improper restriction of the path name for a limited directory. This allows attackers to gain access to confidential information.
29 Oct 202400:00
–bdu_fstec
Circl		CVE-2023-29159
17 May 202303:49
–circl
CNNVD		Starlette 路径遍历漏洞
30 May 202300:00
–cnnvd
CVE		CVE-2023-29159
1 Jun 202300:00
–cve
Cvelist		CVE-2023-29159
1 Jun 202300:00
–cvelist
Debian		[SECURITY] [DSA 6302-1] starlette security update
27 May 202621:01
–debian
Tenable Nessus		Debian dsa-6302 : python3-starlette - security update
28 May 202600:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian12anystarlette0.26.1-1+deb12u1starlette_0.26.1-1+deb12u1_any.deb
Debian13anystarlette0.28.0-1starlette_0.28.0-1_any.deb
Debian14anystarlette0.28.0-1starlette_0.28.0-1_any.deb
Debian999anystarlette0.28.0-1starlette_0.28.0-1_any.deb
Debian11anystarlette0.14.1-1starlette_0.14.1-1_any.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
01 Jun 2023 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 3.17.5
EPSS0.02032
SSVC
directory traversalstarletteremote attackerweb serviceunix
28