Auto Generated CVE annotations [Sun Oct 17 02:21:14 UTC 2021] 🤖

cves/2021/CVE-2021-40978.yaml

@@ -9,6 +9,11 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2021-40978
   tags: cve,cve2021,mkdocs,lfi
   description: "** DISPUTED ** The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://github.com/nisdn/CVE-2021-40978/issues/1."
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.50
+    cve-id: CVE-2021-40978
+    cwe-id: CWE-22
 
 requests:
   - method: GET

cves/2021/CVE-2021-42013.yaml

@@ -10,6 +10,11 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2021-42013
     - https://twitter.com/itsecurityco/status/1446136957117943815
   tags: cve,cve2021,lfi,apache,rce,misconfig
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.80
+    cve-id: CVE-2021-42013
+    cwe-id: CWE-22
 
 requests:
   - raw: