← All advisories

Medium severity5.3NVD Advisory· Published Apr 2, 2021· Updated Jun 17, 2026

CVE-2021-3374

CVE-2021-3374

Description

Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

RStudio/Shiny Server2 versions
cpe:2.3:a:rstudio:shiny_server:*:*:*:*:pro:*:*:*+ 1 more
- cpe:2.3:a:rstudio:shiny_server:*:*:*:*:pro:*:*:*range: <1.5.16
- (no CPE)range: <1.5.16
RStudio/Shiny Serverdescription

Patches

Vulnerability mechanics

References

1

blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.