CVE-2020-36559

—

CVSS 3.1

7.5 high

EPSS

1%p65

Published

Dec 27, 2022 (Dec 27, 2022)

Modified

Jun 17, 2026

Description

Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.

Vendors: aahframework
Products: aah
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.