Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36968
HistorySep 08, 2022 - 3:03 a.m.

Information Disclosure

2022-09-0803:03:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
mangadex-downloader
information disclosure
vulnerability
url path validation
validator.py
attacker
local disk
file reading

0.001 Low

EPSS

Percentile

26.4%

mangadex-downloader is vulnerable to information disclosure. The vulnerability exists due to the improper url path validation in the validate_url function of validator.py, allowing an attacker to open and read files from the local disk through the commands such as file: and ``

0.001 Low

EPSS

Percentile

26.4%

Related for VERACODE:36968