CVE-2024-32982 Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Litestar and Starlite is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.8.3, 2.7.2, and 2.6.4, a Local File Inclusion LFI vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws,...

CVE-2024-32982

Litestar/Starlite static file serving is affected by a Local File Inclusion (LFI) due to an unsafe path handling implementation in litestar/static_files/base.py. Prior to versions 2.8.3, 2.7.2, and 2.6.4, this path traversal flaw can allow an attacker to access files outside the intended static d...

CVE-2024-32982 Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Litestar and Starlite is an Asynchronous Server Gateway Interface ASGI framework. Prior to 2.8.3, 2.7.2, and 2.6.4, a Local File Inclusion LFI vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws,...

acp-agent (>=0.0.1 <=0.2.4), agentor (>=0.0.4 <=0.0.6) +138 more potentially affected by CVE-2024-32982 via litestar (>=2.0.0b2 <=2.23.0)

litestar PYPI version =2.0.0b2, =0.0.1, =0.0.4, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0, =0.1.2, =0.1.0, =1.1.13, =0.0.1, =0.1.0, =0.1.8, =0.3.0 and more Source cves: CVE-2024-32982 Source advisory: OSV:GHSA-83PV-QR33-2VCF...

GHSA-83PV-QR33-2VCF Litestar and Starlite vulnerable to Path Traversal

Summary Local File Inclusion via Path Traversal in LiteStar Static File Serving A Local File Inclusion LFI vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws, enabling unauthorized access to...

Litestar and Starlite vulnerable to Path Traversal

Summary Local File Inclusion via Path Traversal in LiteStar Static File Serving A Local File Inclusion LFI vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws, enabling unauthorized access to...

CVE-2024-32982

creationtimestamp| type| source ---|---|--- 2024-05-06 07:22:31+00:00| published-proof-of-concept| https://github.com/litestar-org/litestar/security/advisories/GHSA-83pv-qr33-2vcf...

PT-2024-25030

Name of the Vulnerable Software and Affected Versions Litestar versions prior to 2.8.3 Litestar versions prior to 2.7.2 Litestar versions prior to 2.6.4 Description A Local File Inclusion LFI vulnerability has been discovered in the static file serving component of Litestar, allowing attackers to...

Litestar 安全漏洞

Litestar is a powerful, flexible but stubborn ASGI framework open-sourced by Litestar. A security vulnerability exists in Litestar. An attacker exploiting this vulnerability could gain access to sensitive information...