Lucene search

uWSGI Directory Traversal vulnerability

🗓️ 14 May 2022 03:52:35Reported by GitHub Advisory DatabaseType

uWSGI Directory Traversal vulnerability in version 2.0.1

Reporter	Title	Published	Views	Family All 29
OSV	uwsgi - security update	17 Mar 201800:00	–	osv
OSV	PYSEC-2018-78	26 Feb 201822:29	–	osv
OSV	CVE-2018-7490	26 Feb 201822:29	–	osv
Dsquare	uWSGI Path Traversal File Disclosure	2 Jul 201800:00	–	dsquare
NVD	CVE-2018-7490	26 Feb 201822:29	–	nvd
Tenable Nessus	Fedora 28 : uwsgi (2018-acfce682f4)	3 Jan 201900:00	–	nessus
Tenable Nessus	Fedora 27 : uwsgi (2018-04b3af1edf)	24 Jul 201800:00	–	nessus
Tenable Nessus	Debian DSA-4142-1 : uwsgi - security update	19 Mar 201800:00	–	nessus
Packet Storm	uWSGI Directory Traversal	2 Mar 201800:00	–	packetstorm
Fedora	[SECURITY] Fedora 28 Update: uwsgi-2.0.17.1-1.fc28	20 Jul 201817:45	–	fedora

Vulners

Node

unbit uwsgiRange<2.0.17

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-7490
uwsgi-docs	www.uwsgi-docs.readthedocs.io/en/latest/Changelog-2.0.17.html
debian	www.debian.org/security/2018/dsa-4142
github	www.github.com/unbit/uwsgi/commit/0a480f435ea6feb63deb410ad2bf376ed3f05f8a
exploit-db	www.exploit-db.com/exploits/44223
github	www.github.com/pypa/advisory-database/tree/main/vulns/uwsgi/PYSEC-2018-78.yaml
github	www.github.com/advisories/GHSA-h2vm-c85r-5vh5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2022 03:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS25

CVSS37.5

EPSS0.90908

CWE-22