Description
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | sanic | < 0.5.1 | 0.5.1 | GHSA-mpmf-hr8p-p49g |
Published Nov 10, 2017 · Updated Aug 5, 2024 · Assigned by mitre
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | sanic | < 0.5.1 | 0.5.1 | GHSA-mpmf-hr8p-p49g |