Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40559
HistoryMay 17, 2023 - 12:52 a.m.

Directory Traversal

2023-05-1700:52:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

41.6%

pymdown_extensions is vulnerable to Directory Traversal. The vulnerability exists in get_snippet_path function of snippets.py because the content of a file can be displayed outside of the specified base path using a path relative to that base path, resulting in unwanted information being exposed via path traversal.

0.001 Low

EPSS

Percentile

41.6%

Related for VERACODE:40559