CVE-2021-40978

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information

published October 7, 2021

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://github.com/nisdn/CVE-2021-40978/issues/1

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15103 · 96.7th percentile
Published
2021-10-07T13:23Z
EPSS history
Timeline
  • 07 OCT 13:23Z
    The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information
    cvelistv5