CVE-2019-14322

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames

published July 28, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
56%
Percentile
99.0
In the wild
Unconfirmed
What it is

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.55803 · 99.0th percentile
Published
2019-07-28T12:36Z
EPSS history
Timeline
  • 28 JUL 12:36Z
    In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames
    cvelistv5