Skip to content
OpenAdvisories

Package · PyPI

cherrymusic

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2015-8309 Public exploit

    Cherry Music directory traversal vulnerability

    Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."