cbcvebase.

Avalanche123 Cassandra Web vulnerabilities

1 known vulnerability affecting avalanche123/cassandra_web.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2020-36939P2HIGHCVSS 7.5PoCv0.5.02026-01-27
CVE-2020-36939 [HIGH] CWE-22 CVE-2020-36939: Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attacke Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache Cassandra database credentials.
nvd
Avalanche123 Cassandra Web vulnerabilities | cvebase