CVE-2020-15230

—

CVSS 3.1

6.5 medium

EPSS

2%p73

Published

Oct 2, 2020 (Oct 2, 2020)

Modified

Jun 17, 2026

Description

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.

Vendors: vapor project
Products: vapor
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.