Unscored CVE-2014-3855 EUVD-2014-3792GHSA-9p9r-h4c9-vggj

Directory traversal vulnerability in download.py in Pyplate 0.08 allows remote attackers to read arbitrary files via a .. (dot dot) in the …

Published Aug 7, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in download.py in Pyplate 0.08 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.

References

[oss-security] 20140523 Re: CVE request: Pyplate multiple vulnerabilities mailing-list
[oss-security] 20140514 CVE request: Pyplate multiple vulnerabilities mailing-list