Vulnerabilities > Glance Project > Glance > 3.0.0

DATE CVE VULNERABILITY TITLE RISK
2023-02-13 CVE-2022-25937 Path Traversal vulnerability in Glance Project Glance
Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory.
network
low complexity
glance-project CWE-22
6.5
2018-06-07 CVE-2018-3715 Path Traversal vulnerability in Glance Project Glance
glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path.
network
low complexity
glance-project CWE-22
6.5