p PatchFirst

CVE-2004-1444

CVE-2004-1444

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.

EPSS 8.9% · Public exploit · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • roundup PyPI

    Versions
    • 0.5.9
    • 0.6.11
    • 0.6.8
    • 0.6.9
    • 0.7.0
    • 0.7.0b3
    • 0.7.1
    • 0.7.2
    Affected ranges
    • ECOSYSTEM: < 0.7.3

    Update to 0.7.3

Original sources

Check your server →