PYSEC-2017-40

2017-11-1009:29:00

Google

osv.dev

0.004 Low

EPSS

Percentile

72.5%

JSON

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/…%2f substring.

CPENameOperatorVersion
saniceq0.1.1
saniceq0.3.0
saniceq0.1.6
saniceq0.4.1
saniceq0.3.1
saniceq0.1.8
saniceq0.2.0
saniceq0.1.4
saniceq0.5.0
saniceq0.1.5

Name	Operator	Version
sanic	eq	0.1.1
sanic	eq	0.3.0
sanic	eq	0.1.6
sanic	eq	0.4.1
sanic	eq	0.3.1
sanic	eq	0.1.8
sanic	eq	0.2.0
sanic	eq	0.1.4
sanic	eq	0.5.0
sanic	eq	0.1.5

Rows per page:

1-10 of 151

References

github.com/channelcat/sanic/issues/633

github.com/channelcat/sanic/releases/tag/0.5.1

0.004 Low

EPSS

Percentile

72.5%

JSON

Related for OSV:PYSEC-2017-40