CVE-2020-36559

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-36559

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-36559.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2020-36559

Aliases

Published

2022-12-27T22:15:11.500Z

Modified

2026-03-18T11:40:05.466829Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

References

Affected packages

Git / github.com/go-aah/aah

Affected ranges

Type

GIT

Repo

https://github.com/go-aah/aah

Events

Introduced

Fixed

881dc9f71d1f7a4e8a9a39df9c5c081d3a2da1ec

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.12.4"
        }
    ]
}

Affected versions

v0.*

v0.1

v0.10

v0.10.1

v0.11.0

v0.11.1

v0.11.2

v0.11.3

v0.11.4

v0.12.0

v0.12.1

v0.12.2

v0.12.3

v0.2

v0.3

v0.4

v0.4.1

v0.5

v0.5.1

v0.6

v0.7

v0.8

v0.9

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-36559.json"