PT-2019-14240 · Swoole · Swoole

Windrunner414 · Publicado 2019-08-23 · Atualizado 2019-08-27 · CVE-2019-15518

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Swoole versions prior to 4.2.13

Description The issue allows directory traversal in the swPort http static handler.

Recommendations For versions prior to 4.2.13, update to version 4.2.13 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-15518

Produtos afetados

Swoole

Referências · 4

• https://github.com/swoole/swoole-src/compare/v4.2.12...v4.2.13 · Correção
• https://github.com/swoole/swoole-src/pull/2323 · Correção
• https://osv.dev/vulnerability/CVE-2019-15518 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15518 · Nota de Segurança