CVE-2020-36565

Directory traversal on Windows in github.com/labstack/echo/v4

Medium · published December 7, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01413 · 72.5th percentile
Published
2022-12-07T16:14Z
EPSS history
Timeline
  • 07 DEC 16:14Z
    Directory traversal on Windows in github.com/labstack/echo/v4
    cvelistv5