Lucene search
+L

89 matches found

PyPA
PyPA
•added 2026/07/13 3:19 p.m.•25 views

NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

Summaryui.restructuredtext renders reStructuredText server-side with Docutils without disabling file insertion directives.When a NiceGUI application passes attacker-controlled content to ui.restructuredtext, an attacker can use standard Docutils directives include, csv-table with :file:, raw with...

7.5CVSS6.2AI score0.00432EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder