CVE-2014-3855

2014-08-0710:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.01

Percentile

83.5%

JSON

Directory traversal vulnerability in download.py in Pyplate 0.08 allows remote attackers to read arbitrary files via a … (dot dot) in the filename parameter.

References

www.openwall.com/lists/oss-security/2014/05/14/3

www.openwall.com/lists/oss-security/2014/05/23/1