Skip to content
OpenAdvisories

Package · PyPI

cherrypy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2008-0252

    CherryPy Malicious cookies allow access to files outside the session directory

    Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arb…

    cherrypy cherrypy3 Debian PyPI
  • High 7.5
    CVE-2006-0847

    CherryPy Directory traversal vulnerability

    Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.

    cherrypy PyPI