Skip to content
OpenAdvisories

Package · Debian

cherrypy3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2008-0252

    CherryPy Malicious cookies allow access to files outside the session directory

    Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arb…

    cherrypy cherrypy3 Debian PyPI