Lucene search
+L

2 matches found

PyPA
PyPA
•added 2026/10/15 10:22 a.m.•11 views

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

SummaryOn Windows, a TemplateLookup URI beginning with a drive designator e.g. C:/../../secret.txt or C:\..\..\secret.txt bypasses the directory traversal check in Template.init, allowing reads of files outside the configured template directory.This is a third, independent instance of the root...

8.7CVSS5.9AI score0.00361EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder