Shiva-server Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Shiva-server Project records in CISA KEV

No Shiva-server Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-13483 CVE-2022-31558 · GHSA-qp72-96p2-g644

MEDIUM 43

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01282 Published 2022-07-11 No fix listed CWE-22