medium5.3
CVE-2021-3374
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.
Impact
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rstudio | Shiny Server | before 1.5.16 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/
- https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak
- https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/
- https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak