sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs

ImpactAccess to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted. Patches- v20.12.7 LTS- v21.12.2 LTS- v22.6.1 Referenceshttps://github.com/sanic-org/sanic/issues/2478https://github.com/sanic-org/sanic/pull/2495 For more informationIf...

HTTP Header Injection

sanic is vulnerable to HTTP header inject attacks. The vulnerability exists due to the lack of sanitization of the URL field, allowing arbitrary header injection...

Directory traversal

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...