JVN#95981715: Starlette vulnerable to directory traversal

Starlette provided by Encode contains a directory traversal vulnerability (CWE-22).

Impact

Under certain conditions, a remote attacker may view files in a web service which was built using the product.

Solution

Update the software
Update the software according to the information provided by the developer.
The developer has released the following version that addresses the vulnerability.

• Starlette 0.27.0

Products Affected

• Starlette versions 0.13.5 and later and prior to 0.27.0