PSF-2013-3
CGI directory traversal (URL parsing)
No score
An error in separating the path and filename of the CGI script to run in
http.server.CGIHTTPRequestHandler allows running arbitrary executables
in the directory under which the server was started.
What each source reports
OSV No score
CGI directory traversal (URL parsing)
An error in separating the path and filename of the CGI script to run in
http.server.CGIHTTPRequestHandler allows running arbitrary executables
in the directory under which the server was started.
- Record
PSF-2013-3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PSF-2013-3 is a vulnerability with no CVSS score yet, published October 29, 2013. No source lists public exploit code. No source names a fixed version.