CVE-2018-13034

2018-07-0918:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.5%

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via “…%f” sequences.

CPENameOperatorVersion
jestereq0.2.0
jestereq0.1.1
jestereq0.1.0

Name	Operator	Version
jester	eq	0.2.0
jester	eq	0.1.1
jester	eq	0.1.0

References

github.com/dom96/jester/blob/master/changelog.markdown