Skip to content
OpenAdvisories

Package · PyPI

xmpp-http-upload

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.5
    CVE-2020-15239

    Directory Traversal in xmpp-http-upload

    In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data` suffix and which are accompanied by a JSON file with the `.meta` suffix. This can lead to Information Disclosure and in some shared-hostin…

    horazont xmpp-http-upload xmpp-http-upload PyPI