CVE-2017-16762

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-11-10

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Sanic (Sanic Project)

References

• https://github.com/channelcat/sanic/issues/633
• https://github.com/channelcat/sanic/releases/tag/0.5.1