← Database

CVE-2022-35920

HIGH CVSS: 8.3 Published: 2022-08-01 Modified: 2026-06-17

Description

Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using `app.static` if using encoded `%2F` URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue.

Affected Platforms

Sanic Project Sanic

Weakness Type

CWE-22

References