cassandra_web vulnerabilities

CVEs whose affected-version data names the cassandra_web package (rubygems). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-36939High· 7.5PoC

9mo ago

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read …

▾ Midnightavalanche123 · Cassandra WebEPSS 3.0%via NVD