Cherrypy

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cherrypy records in CISA KEV

No Cherrypy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cherrypy 2 records LOW

Records

2 records in Cherrypy · all components

TI-2008-00234 CVE-2008-0252 · GHSA-76x8-gg39-5jjg

Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py…

LOW 38

Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02647 Published 2008-01-12 Fixed in 2.1.1, 3.0.2 CWE-22

TI-2006-00825 CVE-2006-0847 · GHSA-vx77-5pf4-c9wr

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1…

LOW 27

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02383 Published 2006-02-22 Fixed in 2.1.1 CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0