CVE-2023-40274

2023-08-1401:15:47

Google

osv.dev

zola

web server

directory traversal

handle_request function

http requests

filesystem

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.1%

JSON

An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the “zola serve” command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account for sequences of special path control characters (…/) in the URL when serving a file, which allows one to escape the webroot of the server and read arbitrary files from the filesystem.

CPENameOperatorVersion
zolaeq0.17.0
zolaeq0.17.1
zolaeq0.16.1
zolaeq0.15.1
zolaeq0.13.0
zolaeq0.14.1
zolaeq0.17.2
zolaeq0.16.0
zolaeq0.14.0
zolaeq0.15.0