CVE-2020-15101

Nested directory structure can lead to Uncontrolled Resource Consumption in freewvs

State
Published
Severity
2.8 Low
Published
Jul 14, 2020
Updated
Aug 4, 2024
Reserved
Jun 25, 2020

Read the record on cve.org

Description

In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1.

Scores

CVSSScoreVectorSource
3.12.8 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:LGitHub_M

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
freewvsschokokeksorg
  • < 0.1.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.