p PatchFirst

CVE-2023-29159

CVE-2023-29159

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.

CVSS 7.5 · High · EPSS 2.0% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • starlette

    Versions
    • versions 0.13.5 and later and prior to 0.27.0: Affected

    No fix published

  • starlette Debian:12

    Versions
    • 0.26.1-1
    Affected ranges
    • ECOSYSTEM: < 0.26.1-1+deb12u1

    Update to 0.26.1-1+deb12u1

  • starlette Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.28.0-1

    Update to 0.28.0-1

  • starlette Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.28.0-1

    Update to 0.28.0-1

  • starlette PyPI

    Versions
    • 0.13.5
    • 0.13.6
    • 0.13.7
    • 0.13.8
    • 0.14.0
    • 0.14.1
    • 0.14.2
    • 0.15.0
    • 0.16.0
    • 0.17.0
    • 0.17.1
    • 0.18.0
    • 0.19.0
    • 0.19.1
    • 0.20.0
    • 0.20.1
    • 0.20.2
    • 0.20.3
    • 0.20.4
    • 0.21.0
    • 0.22.0
    • 0.23.0
    • 0.23.1
    • 0.24.0
    • 0.25.0
    • 0.26.0
    • 0.26.0.post1
    • 0.26.1
    Affected ranges
    • ECOSYSTEM: ≥ 0.13.5, < 0.27.0

    Update to 0.27.0

  • starlette Ubuntu:22.04:LTS

    Versions
    • 0.14.1-1
    • 0.16.0-1
    • 0.18.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →