Read the docs

aahframe.work

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

aahframe.work records in CISA KEV

No aahframe.work vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aah 1 record LOW

Records

1 record

TI-2020-18787 CVE-2020-36559 · GHSA-vp56-r7qv-783v

Path Traversal in aahframe.work

Priority LOW 35

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0124 Published 2022-12-27 Fixed in 0.12.4 CWE-22
Open these records in search →