Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2020-27304

critical

CVE-2020-27304

civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API

Published Modified CWE 23, 22
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD, Azure Linux, Photon OS. Rated lower by Red Hat (high).

Description

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal

Affected packages and fixed versions

SourcePackageFixed in
Azure Linux 3.0ceph0:18.2.1-1.azl3
Photon OS 3.0falco0.31.1-1.0419283003.ph3
Photon OS 4.0falco, falco-devel0.35.0-1.0510180001.ph4
debian 11civetwebno fix listed
debian 12civetweb1.15+dfsg-1
debian 13civetweb1.15+dfsg-1
debian 14civetweb1.15+dfsg-1
echocivetweb1.15+dfsg-1
Red Hatceph, ceph-base, ceph-common and 27 moreno fix listed
Show all 39 entries from 9 sources
SourcePackageFixed in
Azure Linux 3.0ceph0:18.2.1-1.azl3
Photon OS 3.0falco0.31.1-1.0419283003.ph3
Photon OS 4.0falco0.35.0-1.0510180001.ph4
Photon OS 4.0falco-devel0.35.0-1.0510180001.ph4
debian 11civetwebno fix listed
debian 12civetweb1.15+dfsg-1
debian 13civetweb1.15+dfsg-1
debian 14civetweb1.15+dfsg-1
echocivetweb1.15+dfsg-1
Red Hatcephno fix listed
Red Hatceph-baseno fix listed
Red Hatceph-commonno fix listed
Red Hatceph-fuseno fix listed
Red Hatceph-mdsno fix listed
Red Hatceph-mgrno fix listed
Red Hatceph-monno fix listed
Red Hatceph-osdno fix listed
Red Hatceph-radosgwno fix listed
Red Hatceph-selinuxno fix listed
Red Hatceph-testno fix listed
Red Hatlibcephfs-develno fix listed
Red Hatlibcephfs1no fix listed
Red Hatlibcephfs1-develno fix listed
Red Hatlibcephfs2no fix listed
Red Hatlibrados-develno fix listed
Red Hatlibrados2no fix listed
Red Hatlibrados2-develno fix listed
Red Hatlibradosstriper1no fix listed
Red Hatlibrbd-develno fix listed
Red Hatlibrbd1no fix listed
Red Hatlibrbd1-develno fix listed
Red Hatlibrgw-develno fix listed
Red Hatlibrgw2no fix listed
Red Hatlibrgw2-develno fix listed
Red Hatpython-cephfsno fix listed
Red Hatpython-radosno fix listed
Red Hatpython-rbdno fix listed
Red Hatpython-rgwno fix listed
Red Hatrbd-mirrorno fix listed

References

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.