CVE-2018-7490

Publication date

2018-02-26 22:00:00

Family

mitre

State

PUBLISHED

Description

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.