Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-1015)

Description

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Remediation

References

CVE-2011-1015

Related Vulnerabilities

WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution 'uploadify.php' Arbitrary File Upload (1.6.1)

WordPress Plugin Wholesale Market Arbitrary File Download (2.2.0)

WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.21)

Sqlite Improper Resource Shutdown or Release Vulnerability (CVE-2015-3415)

OpenSSL Improper Locking Vulnerability (CVE-2022-3996)

Severity

Medium

Classification

CVE-2011-1015 CWE-200