Lucene search

K
osvGoogleOSV:GO-2020-0033
HistoryApr 14, 2021 - 8:04 p.m.

Path Traversal in aahframe.work

2021-04-1420:04:52
Google
osv.dev
11
improper sanitization
httpengine.handle
directory traversal
unauthorized files
information security

EPSS

0.001

Percentile

50.1%

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

EPSS

0.001

Percentile

50.1%