Lucene search

K
osvGoogleOSV:GHSA-VWR2-WJ63-86GR
HistoryDec 06, 2018 - 3:49 p.m.

Path Traversal in simplehttpserver

2018-12-0615:49:10
Google
osv.dev
19

0.001 Low

EPSS

Percentile

40.7%

All versions of simplehttpserver are vulnerable to Path Traversal.

This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL.

Recommendation

No fix is currently available. Do not use simplehttpserver in production or consider using an alternative module until a fix is made available.

CPENameOperatorVersion
simplehttpserverle0.3.0

0.001 Low

EPSS

Percentile

40.7%