Home > Vulnerability Database > CVE-2019-15518

WhiteSource Vulnerability Database

New vulnerability? Tell us about it!

CVE-2019-15518

Good to know:

Date: August 27, 2019

Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.

Language: C++

Severity Score

4.3

Related Resources (4)

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-15518

Url: https://github.com/swoole/swoole-src/compare/v4.2.12...v4.2.13

Url: https://github.com/swoole/swoole-src/pull/2323

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2019-15518

Severity Score

4.3

Weakness Type (CWE)

Path Traversal

CWE-22

Top Fix

Upgrade Version

Upgrade to version v4.2.13

CVSS v3

Base Score:	4.3
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL

CVSS v2

Base Score:	5.6
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW
Additional information:

Do you need more information?

Contact Us