Lucene search

K
githubGitHub Advisory DatabaseGHSA-H2VM-C85R-5VH5
HistoryMay 14, 2022 - 3:35 a.m.

uWSGI Directory Traversal vulnerability

2022-05-1403:35:52
CWE-22
GitHub Advisory Database
github.com
7

6.6 Medium

AI Score

Confidence

Low

0.954 High

EPSS

Percentile

99.4%

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

CPENameOperatorVersion
uwsgilt2.0.17