Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Unbit records in CISA KEVNo Unbit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 70
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.69423 · Published 2018-02-26 · Fixed in 2.0.17 CWE-22
Priority MEDIUM 46
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02047 · Published 2018-02-06 · No fix listed CWE-787
Priority MEDIUM 43
HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02134 · Published 2023-03-07 · Partial fix · 2.0.22 CWE-444
