Path Traversal Affecting mesop package, versions [0.9.0,0.12.4)
Threat Intelligence
EPSS
0.04% (12th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-MESOP-8057707
- published 19 Sep 2024
- disclosed 18 Sep 2024
- credit Letm3through
Introduced: 18 Sep 2024
CVE-2024-45601 Open this link in a new tabHow to fix?
Upgrade mesop to version 0.12.4 or higher.
Overview
mesop is a Build UIs in Python
Affected versions of this package are vulnerable to Path Traversal due to insufficient input validation in the static file serving functionality. An attacker can access files not intended to be served by manipulating the input to the endpoint.