Mochiweb Project Mochiweb vulnerabilities

1 known vulnerability affecting mochiweb_project/mochiweb.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2012-5641MEDIUMCVSS 5.0≤ 2.3.2v2.1.0+4 more2014-03-18

CVE-2012-5641 [MEDIUM] CWE-22 CVE-2012-5641: Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the default URI.