{"id":"CVE-2026-117183","title":"A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL.","summary":"A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"adp","ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-02T15:07:35.674798Z"},"exploitAvailable":true,"published":"2026-10-30","updated":"2026-11-02","sourceUpdated":"2026-11-02T15:08:24.191Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117183","references":[{"url":"https://github.com/otoyo/astro-notion-blog/issues/255"},{"url":"https://github.com/Primandito/CVE-2026-117183"}],"tags":["cve.org","exploit-available"],"epss":0.00488,"epssPercentile":0.42278,"exploits":{"github":1,"githubRepos":["https://github.com/Primandito/CVE-2026-117183"],"checkedAt":"2026-11-07T18:06:29.395Z"},"ingestedAt":"2026-11-05T19:30:42.691Z","slug":"CVE-2026-117183","body":"## Overview\n\nA path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}