PT-2020-14185 · Python · Freewvs

Hanno Böck · Published 2020-07-14 · Updated 2024-08-30 · CVE-2020-15101

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions freewvs versions prior to 0.1.1

Description A directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic when an administrator scans directories of potentially untrusted users.

Recommendations For versions prior to 0.1.1, update to version 0.1.1 to resolve the issue.

Fix

Uncontrolled Recursion

Resource Exhaustion

Weakness Enumeration

CWE-674

CWE-400

Related Identifiers

CVE-2020-15101

GHSA-7PMH-VRWW-25XX

PYSEC-2020-233

Affected Products

Freewvs

References · 8

• https://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e6078803143 · Patch
• https://osv.dev/vulnerability/GHSA-7pmh-vrww-25xx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15101 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-233 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15101 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/freewvs/PYSEC-2020-233.yaml · Note
• https://github.com/schokokeksorg/freewvs/security/advisories/GHSA-7pmh-vrww-25xx · Note
• https://github.com/schokokeksorg/freewvs · Note