CVE-2020-15101

Katalog CVE

CVSS 3.3 · Low EPSS 0,69%

Kerentanan Uncontrolled Resource Consumption pada schokokeks freewvs. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1.

Rincian

Terbit di NVD

14 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-674: Uncontrolled Recursion

EPSS (30 hari)

0,69% peluang dieksploitasi; lebih tinggi dari 51,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e6078803143 patch · advisory pihak ketiga
• https://github.com/schokokeksorg/freewvs/security/advisories/GHSA-7pmh-vrww-25xx advisory pihak ketiga