CVE-2022-35920 — Improper Limitation of a Pathname to a Restricted Directory in sanic
Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent di…
Published: 2022-08-01 · CVSS: 8.3 · CVSS 3.1
Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7