← All advisories

High severityNVD Advisory· Published Jul 28, 2019· Updated Aug 5, 2024

CVE-2019-14322

CVE-2019-14322

Description

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
werkzeugPyPI	< 0.15.5	0.15.5

Affected products

2

Pallets/Werkzeugdescription
ghsa-coords
pkg:pypi/werkzeug
Range: < 0.15.5

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-j544-7q9p-6xp8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-14322ghsaADVISORY
packetstormsecurity.com/files/163398/Pallets-Werkzeug-0.15.4-Path-Traversal.htmlghsax_refsource_MISCWEB
palletsprojects.com/blog/werkzeug-0-15-5-releasedghsaWEB
palletsprojects.com/blog/werkzeug-0-15-5-released/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.