Lucene search

K
osvGoogleOSV:GHSA-45J8-PM75-5V8X
HistoryFeb 07, 2019 - 6:18 p.m.

Path Traversal in simplehttpserver

2019-02-0718:18:04
Google
osv.dev
7

0.009 Low

EPSS

Percentile

82.8%

Versions of simplehttpserver prior to 0.2.1 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.

Recommendation

Upgrade to version 0.2.1 or later.

CPENameOperatorVersion
static-resource-serverle1.7.2

0.009 Low

EPSS

Percentile

82.8%