1 matches found
WsgiDAV encoded dot segments can escape filesystem share roots
ImpactWsgiDAV 4.3.3 can allow a WebDAV request path containing an encoded parent-directory segment to escape the configured filesystem share root in a specific path layout. PatchesThe issue is fixed with version 4.3.4. PreconditionsThe practical impact depends on the deployment.The deployment use...
7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References6Affected Software1
20