Lucene search
+L

133 matches found

Prion
Prion
•added 2021/10/07 2:15 p.m.•20 views

Directory traversal

DISPUTED The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and...

5CVSS7.4AI score0.15103EPSS
SaveExploits2References4Affected Software1
attackerkb
attackerkb
•added 2021/10/07 2:15 p.m.•13 views

CVE-2021-40978

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.5CVSS7.2AI score0.15103EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
•added 2021/10/07 2:15 p.m.•35 views

CVE-2021-40978

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.5CVSS7.2AI score0.15103EPSS
SaveExploits2References5
OSV
OSV
•added 2021/10/07 2:15 p.m.•12 views

PYSEC-2021-878

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.5CVSS5.9AI score0.15103EPSS
SaveExploits2References6
PyPA
PyPA
•added 2021/10/07 2:15 p.m.•13 views

PYSEC-2021-878

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.5CVSS7AI score0.15103EPSS
SaveExploits2References6Affected Software1
Vulnrichment
Vulnrichment
•added 2021/10/07 1:23 p.m.•19 views

CVE-2021-40978

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

6.8AI score0.15103EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2021/10/07 1:23 p.m.•38 views

CVE-2021-40978

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.8AI score0.15103EPSS
SaveExploits2References4
CVE
CVE
•added 2021/10/07 1:23 p.m.•170 views

CVE-2021-40978

The CVE-2021-40978 issue affects MkDocs 1.2.2 with its built-in dev-server, where directory traversal is possible on port 8000, allowing remote disclosure of sensitive information. Some sources note vendor dispute and that exploitation requires unsafe use (e.g., public exposure). The Nuclei templ...

7.5CVSS7.4AI score0.15103EPSS
SaveExploits2References4Affected Software1
Debian CVE
Debian CVE
•added 2021/10/07 1:23 p.m.•62 views

CVE-2021-40978

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.5CVSS7.5AI score0.15103EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/07 12:00 a.m.•6 views

CVE-2021-40978: Improper Limitation of a Pathname to a Restricted Directory

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...

7.5CVSS5.9AI score0.15103EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/10/07 12:00 a.m.•12 views

PT-2021-23030 · Mkdocs +1 · Mkdocs +1

Name of the Vulnerable Software and Affected Versions: mkdocs version 1.2.2 Description: The mkdocs built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Recommendations: For mkdocs version 1.2.2, as a temporary workaroun...

8.7CVSS9.4AI score0.15103EPSS
SaveExploits2References25
CNNVD
CNNVD
•added 2021/10/07 12:00 a.m.•23 views

Mkdocs 路径遍历漏洞

Mkdocs is a fast, simple and downright gorgeous static site generator. It is used to build project documentation. mkdocs 1.2.2 suffers from a path traversal vulnerability that allows remote exploitation to obtain sensitive information...

7.5CVSS7.7AI score0.15103EPSS
SaveExploits2References4
attackerkb
attackerkb
•added 2021/06/03 10:15 p.m.•12 views

CVE-2021-32662

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In @backstage/techdocs-common versions prior to 0.6.3, a malicious actor could read sensitive files from the environment where TechDocs documentation is buil...

6.5CVSS6.6AI score0.0128EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder