CVE-2020-15101CWE-400
Nested directory structure can lead to Uncontrolled Resource Consumption in freewvs
Low · published July 14, 2020
What it is
In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1.
The record
Technical detail
- CVSS v3.1
- 2.8 · LOW
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00693 · 52.4th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2020-07-14T21:35Z
EPSS history
Timeline