2 matches found
GHSA-XVV9-5J67-3RPQ zola Path Traversal vulnerability
An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handlerequest function, used by the server to process HTTP requests, does not account for sequences of special path control...
7.5CVSS7.4AI score0.011EPSS
SaveExploits1References4
Directory traversal
An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handlerequest function, used by the server to process HTTP requests, does not account for sequences of special path control...
5CVSS7.5AI score0.011EPSS
SaveExploits1References2Affected Software1
20