Skip to content
OpenAdvisories
High DSA-1481-1 1 CVE

python-cherrypy - missing input sanitising

Published Feb 5, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 python-cherrypy 2.2.1-3etch1

Vulnerabilities 1

  • High 7.5
    CVE-2008-0252

    CherryPy Malicious cookies allow access to files outside the session directory

    Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arb…

    cherrypy cherrypy3 Debian PyPI