CVE-2020-36565
Directory traversal on Windows in github.com/labstack/echo/v4
Medium · published December 7, 2022
What it is
Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.01413 · 72.5th percentile
- Published
- 2022-12-07T16:14Z
EPSS history
Timeline