vulnwire
7.5high

CVE-2018-7490in critical feed1 exploitNuclei template

uWSGI Directory Traversal vulnerability

Also known as GHSA-h2vm-c85r-5vh5, PYSEC-2018-78

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
69.4%
percentile 99%
Public exploits
1
Exploit-DB · Nuclei check

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

Exploit prediction (EPSS)

69.42% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • Nuclei template uWSGI PHP Plugin Local File Inclusion · nuclei detection template
  • EDB-44223 uWSGI < 2.0.17 - Directory Traversal · webapps · 2018-03-02

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N
GitHub3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected packages

EcosystemPackageAffectedFixed in
pypiuwsgi
<2.0.17
2.0.17

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

  • exploit-db.com /exploits/44223/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • debian.org /security/2018/dsa-4142 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • uwsgi-docs.readthedocs.io /en/latest/Changelog-2.0.17.html · x_refsource_CONFIRM, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2018-7490 · advisory
  • github.com /unbit/uwsgi/commit/0a480f435ea6feb63deb410ad2bf376ed3f05f8a · web
  • github.com /pypa/advisory-database/tree/main/vulns/uwsgi/PYSEC-2018-78.yaml · web
  • github.com /unbit/uwsgi · package
  • exploit-db.com /exploits/44223 · web
  • github.com /advisories/GHSA-h2vm-c85r-5vh5 · advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.