CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal

published February 26, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
69%
Percentile
99.4
In the wild
Unconfirmed
What it is

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.69423 · 99.4th percentile
Published
2018-02-26T22:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 69% → 53%
    epss
  • 06 SEP 03:12Z
    EPSS moved 69% → 53%
    epss
  • 30 AUG 16:01Z
    EPSS moved 53% → 69%
    epss
  • 29 AUG 04:42Z
    EPSS moved 69% → 53%
    epss
  • 26 FEB 22:00Z
    uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal
    cvelistv5