Auto Generated CVE annotations [Thu Oct 14 10:52:45 UTC 2021] 🤖

2021-10-14 10:52:45 +00:00 · 2021-10-14 10:52:45 +00:00 · e1adf856e4
parent 3e25576d37
commit e1adf856e4
1 changed files with 1 additions and 0 deletions
--- a/cves/2021/CVE-2021-40978.yaml
+++ b/cves/2021/CVE-2021-40978.yaml
@ -8,6 +8,7 @@ info:
    - https://github.com/nisdn/CVE-2021-40978
    - https://nvd.nist.gov/vuln/detail/CVE-2021-40978
  tags: cve,cve2021,mkdocs,lfi
+  description: "** DISPUTED ** The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://github.com/nisdn/CVE-2021-40978/issues/1."

 requests:
  - method: GET