← Back

CVE-2006-0847

nvd nist
Published: Feb 22, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.

Affected (22)

Products: Cherrypy: Cherrypy
Cherrypy
1 product
Cherrypy
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Cherrypy
Cherrypy
Version 0.10
Cherrypy
Version 0.10_beta
Cherrypy
Version 0.10_rc1
Cherrypy
Version 0.1
Cherrypy
Version 0.2
Cherrypy
Version 0.3
Cherrypy
Version 0.4
Cherrypy
Version 0.5
Cherrypy
Version 0.6
Cherrypy
Version 0.7
Cherrypy
Version 0.8
Cherrypy
Version 0.8_beta
Cherrypy
Version 0.9
Cherrypy
Version 0.9_beta
Cherrypy
Version 0.9_gamma
Cherrypy
Version 0.9_rc1
Cherrypy
Version 2.0.0
Cherrypy
Version 2.0.0a1
Cherrypy
Version 2.1.0
Cherrypy
Version 2.1.0_beta
Cherrypy
Version 2.1.0_rc1
Cherrypy
Version 2.1.0_rc2

References (18)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.