Lucene search
+L

3 matches found

PyPA
PyPA
added 2026/07/07 4:03 p.m.24 views

AIOHTTP vulnerable to brute-force leak of internal static file path components

SummaryPath normalization for static files prevents path traversal, but opens up the ability for an attacker to ascertain theexistence of absolute path components. ImpactIf an application uses web.static not recommended for production deployments, it may be possible for an attacker to ascertain t...

6.9CVSS5.8AI score0.00359EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder