2 matches found
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
SummaryOn Windows, a TemplateLookup URI beginning with a drive designator e.g. C:/../../secret.txt or C:\..\..\secret.txt bypasses the directory traversal check in Template.init, allowing reads of files outside the configured template directory.This is a third, independent instance of the root...
8.7CVSS5.9AI score0.00361EPSS
SaveExploits0References8Affected Software1
20