Vulnerabilities > CVE-2020-15230 - Unspecified vulnerability in Vapor Project Vapor

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
vapor-project
NVD
Published: 2020-10-02
Updated: 2024-11-21

Summary

Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.

Vulnerable Configurations

Part Description Count
Application
Vapor_Project
1

References