Filtered by vendor Aahframework Subscriptions
Filtered by product Aah Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-36559 1 Aahframework 1 Aah 2023-06-12 7.5 High
Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.