Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•33 views

WsgiDAV encoded dot segments can escape filesystem share roots

ImpactWsgiDAV 4.3.3 can allow a WebDAV request path containing an encoded parent-directory segment to escape the configured filesystem share root in a specific path layout. PatchesThe issue is fixed with version 4.3.4. PreconditionsThe practical impact depends on the deployment.The deployment use...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder