https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:23:24.518636+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2008-0252 CVE-2008-0252 2026-10-02T13:23:24.551558+00:00

Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie.

 https://cve.radiocsirt.org/vuln/ghsa-76x8-gg39-5jjg GHSA-76x8-gg39-5jjg — CherryPy Malicious cookies allow access to files outside the session directory 2026-10-02T13:23:24.551615+00:00

Affected: PyPI: cherrypy

Directory traversal vulnerability in the _get_file_path function in (1) `lib/sessions.py` in CherryPy 3.0.x up to 3.0.2, (2) `filter/sessionfilter.py` in CherryPy 2.1, and (3) `filter/sessionfilter.py` in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie.