Read the docs

Mongrel

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mongrel records in CISA KEV

No Mongrel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mongrel 1 record LOW

Records

1 record in Mongrel · all components

TI-2007-06308 CVE-2007-6612 · GHSA-m7r6-43v2-49vf

Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel…

Priority LOW 34

Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences ("…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03003 Published 2008-01-03 Fixed in 1.0.5, 1.1.3 CWE-22
Open these records in search →