5
CVSSv2

CVE-2006-0847

Published: 22/02/2006 Updated: 20/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in the staticfilter component in CherryPy prior to 2.1.1 allows remote malicious users to read arbitrary files via ".." sequences in unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

cherrypy cherrypy 0.9 rc1

cherrypy cherrypy 0.2

cherrypy cherrypy 2.0.0

cherrypy cherrypy 2.1.0

cherrypy cherrypy 0.10 beta

cherrypy cherrypy 0.10 rc1

cherrypy cherrypy 0.9

cherrypy cherrypy 0.7

cherrypy cherrypy 0.9 gamma

cherrypy cherrypy 2.1.0 beta

cherrypy cherrypy 0.6

cherrypy cherrypy 0.3

cherrypy cherrypy 0.5

cherrypy cherrypy 0.8

cherrypy cherrypy 0.9 beta

cherrypy cherrypy 2.0.0a1

cherrypy cherrypy 2.1.0 rc1

cherrypy cherrypy 0.10

cherrypy cherrypy 0.8 beta

cherrypy cherrypy 0.1

cherrypy cherrypy 0.4

cherrypy cherrypy 2.1.0 rc2