This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed. The contents of arbitrary files could be disclosed in the HTML output.
References
Link | Resource |
---|---|
https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd | Patch Third Party Advisory |
https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647 | Exploit Patch Third Party Advisory |
https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd | Patch Third Party Advisory |
https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647 | Exploit Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 05:51
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.5 |
References | () https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd - Patch, Third Party Advisory | |
References | () https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647 - Exploit, Patch, Third Party Advisory |
24 Aug 2021, 11:15
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://snyk.io/vuln/SNYK-PYTHON-BIKESHED-1537647 - Exploit, Patch, Third Party Advisory | |
References | (MISC) https://github.com/tabatkins/bikeshed/commit/b2f668fca204260b1cad28d5078e93471cb6b2dd - Patch, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CWE | CWE-22 | |
CPE | cpe:2.3:a:bikeshed_project:bikeshed:*:*:*:*:*:*:*:* |
16 Aug 2021, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-08-16 08:15
Updated : 2024-11-21 05:51
NVD link : CVE-2021-23423
Mitre link : CVE-2021-23423
CVE.ORG link : CVE-2021-23423
JSON object : View
Products Affected
bikeshed_project
- bikeshed
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')