S3scanner Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

S3scanner Project records in CISA KEV

No S3scanner Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2021-12022 CVE-2021-32061 · GHSA-qppg-v75c-r5ff

LOW 27

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01646 Published 2021-11-29 Fixed in 2.0.2 CWE-22