Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-29159

Good to know:

icon
icon

Date: May 31, 2023

Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.

Language: Python

Severity Score

Related Resources (10)

https://nvd.nist.gov/vuln/detail/CVE-2023-29159
https://github.com/encode/starlette
https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px
https://github.com/encode/starlette/commit/1797de464124b090f10cf570441e8292936d63e3
https://github.com/encode/starlette/blob/4bab981d9e870f6cee1bd4cd59b87ddaf355b2dc/starlette/staticfiles.py#L172-L174
https://jvn.jp/en/jp/JVN95981715/
https://jvn.jp/en/jp/JVN95981715
https://github.com/encode/starlette/releases/tag/0.27.0
https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2023-83.yaml
https://www.mend.io/vulnerability-database/CVE-2023-29159

Severity Score

Weakness Type (CWE)

Path Traversal

CWE-22

Top Fix

icon

Upgrade Version

Upgrade to version starlette - 0.27.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us