7.5
High
CVE-2023-29159 Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote…
Description
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Starlette | Versions not published |
References
- github.com github.com
- github.com github.com
- jvn.jp jvn.jp
Timeline
- Published
- Last modified
Other CVEs of Starlette
The 5 CVEs of Starlette →
CVE-2025-54121
Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async…
5.3
Medium
CVE-2024-47874
Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit
8.7
High
CVE-2024-24762
`python-multipart` is a streaming multipart parser for Python
7.5
High
CVE-2023-30798
There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated…
7.5
High