CVE-2020-36559

Path Traversal in aahframe.work

High · published December 27, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01196 · 67.8th percentile
Published
2022-12-27T21:13Z
EPSS history
Timeline
  • 27 DEC 21:13Z
    Path Traversal in aahframe.work
    cvelistv5