{"id":"PSF-2013-3","aliases":[],"status":"published","title":"CGI directory traversal (URL parsing)","description":"An error in separating the path and filename of the CGI script to run in\n``http.server.CGIHTTPRequestHandler`` allows running arbitrary executables\nin the directory under which the server was started.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2013-10-29T00:00:00Z","modified":"2025-10-09T00:58:06Z","references":[{"url":"https://bugs.python.org/issue19435","tags":["report"]}],"sources":{"osv":[{"id":"PSF-2013-3","title":"CGI directory traversal (URL parsing)","description":"An error in separating the path and filename of the CGI script to run in\n``http.server.CGIHTTPRequestHandler`` allows running arbitrary executables\nin the directory under which the server was started.\n","status":"published","published":"2013-10-29T00:00:00Z","modified":"2025-10-09T00:58:06.53337Z","updated_at":"2026-11-02T15:52:50.263679Z"}]}}