Skip to content
OpenAdvisories

Package · RubyGems

cassandra-web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-36939 Public exploit

    Cassandra Web 0.5.0 - Remote File Read

    Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files…

    avalanche123 Cassandra Web cassandra-web RubyGems