Vulnerability Details : CVE-2022-35918
Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data from their web server file-system such as: server logs, world readable files, and potentially other sensitive information. An attacker can craft a malicious URL with file paths and the streamlit server would process that URL and return the contents of that file. This issue has been resolved in version 1.11.1. Users are advised to upgrade. There are no known workarounds for this issue.
Vulnerability category: Directory traversal
Products affected by CVE-2022-35918
- cpe:2.3:a:snowflake:streamlit:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-35918
1.59%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 81 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-35918
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
GitHub, Inc. |
CWE ids for CVE-2022-35918
-
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Assigned by:
- nvd@nist.gov (Primary)
- security-advisories@github.com (Secondary)
References for CVE-2022-35918
-
https://github.com/streamlit/streamlit/security/advisories/GHSA-v4hr-4jpx-56gc
Streamlit directory traversal vulnerability · Advisory · streamlit/streamlit · GitHubThird Party Advisory
-
https://github.com/streamlit/streamlit/commit/80d9979d5f4a00217743d607078a1d867fad8acf
Ignore component requests outside of the component root · streamlit/streamlit@80d9979 · GitHubPatch;Third Party Advisory
Jump to