CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-35920

Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.9%

CVSS Severity

CVSS v3 Score 8.3

References

Products affected by CVE-2022-35920

Sanic Project » Sanic » Version: Any

cpe:2.3:a:sanic_project:sanic:*
Sanic Project » Sanic » Version: 0.1.2

cpe:2.3:a:sanic_project:sanic:0.1.2
Sanic Project » Sanic » Version: 0.1.3

cpe:2.3:a:sanic_project:sanic:0.1.3
Sanic Project » Sanic » Version: 0.1.4

cpe:2.3:a:sanic_project:sanic:0.1.4
Sanic Project » Sanic » Version: 0.1.5

cpe:2.3:a:sanic_project:sanic:0.1.5
Sanic Project » Sanic » Version: 0.1.6

cpe:2.3:a:sanic_project:sanic:0.1.6
Sanic Project » Sanic » Version: 0.1.7

cpe:2.3:a:sanic_project:sanic:0.1.7
Sanic Project » Sanic » Version: 0.1.8

cpe:2.3:a:sanic_project:sanic:0.1.8
Sanic Project » Sanic » Version: 0.1.9

cpe:2.3:a:sanic_project:sanic:0.1.9
Sanic Project » Sanic » Version: 0.2.0

cpe:2.3:a:sanic_project:sanic:0.2.0
Sanic Project » Sanic » Version: 0.3.0

cpe:2.3:a:sanic_project:sanic:0.3.0
Sanic Project » Sanic » Version: 0.3.1

cpe:2.3:a:sanic_project:sanic:0.3.1
Sanic Project » Sanic » Version: 0.4.0

cpe:2.3:a:sanic_project:sanic:0.4.0
Sanic Project » Sanic » Version: 0.4.1

cpe:2.3:a:sanic_project:sanic:0.4.1
Sanic Project » Sanic » Version: 0.5.0

cpe:2.3:a:sanic_project:sanic:0.5.0
Sanic Project » Sanic » Version: 0.5.1

cpe:2.3:a:sanic_project:sanic:0.5.1
Sanic Project » Sanic » Version: 0.5.2

cpe:2.3:a:sanic_project:sanic:0.5.2
Sanic Project » Sanic » Version: 0.5.3

cpe:2.3:a:sanic_project:sanic:0.5.3
Sanic Project » Sanic » Version: 0.5.4

cpe:2.3:a:sanic_project:sanic:0.5.4
Sanic Project » Sanic » Version: 0.6.0

cpe:2.3:a:sanic_project:sanic:0.6.0
Sanic Project » Sanic » Version: 0.7.0

cpe:2.3:a:sanic_project:sanic:0.7.0
Sanic Project » Sanic » Version: 0.8.0

cpe:2.3:a:sanic_project:sanic:0.8.0
Sanic Project » Sanic » Version: 0.8.1

cpe:2.3:a:sanic_project:sanic:0.8.1
Sanic Project » Sanic » Version: 0.8.2

cpe:2.3:a:sanic_project:sanic:0.8.2
Sanic Project » Sanic » Version: 0.8.3

cpe:2.3:a:sanic_project:sanic:0.8.3
Sanic Project » Sanic » Version: 18.12.0

cpe:2.3:a:sanic_project:sanic:18.12.0
Sanic Project » Sanic » Version: 19.03.1

cpe:2.3:a:sanic_project:sanic:19.03.1
Sanic Project » Sanic » Version: 19.3

cpe:2.3:a:sanic_project:sanic:19.3
Sanic Project » Sanic » Version: 19.6.0

cpe:2.3:a:sanic_project:sanic:19.6.0
Sanic Project » Sanic » Version: 19.6.1

cpe:2.3:a:sanic_project:sanic:19.6.1
Sanic Project » Sanic » Version: 19.6.2

cpe:2.3:a:sanic_project:sanic:19.6.2
Sanic Project » Sanic » Version: 19.6.3

cpe:2.3:a:sanic_project:sanic:19.6.3
Sanic Project » Sanic » Version: 19.9.0

cpe:2.3:a:sanic_project:sanic:19.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-35920

Products

Pricing

Contact Us