89 matches found
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()
Summaryui.restructuredtext renders reStructuredText server-side with Docutils without disabling file insertion directives.When a NiceGUI application passes attacker-controlled content to ui.restructuredtext, an attacker can use standard Docutils directives include, csv-table with :file:, raw with...
7.5CVSS6.2AI score0.00432EPSS
SaveExploits0References6Affected Software1
20