high7.5
CVE-2017-16762
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
Impact
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sanic Project | Sanic | through 0.5.0 |