> CVE-2026-38360

« BACK_TO_HOME
PUBLISHED
2026-05-08 17:16
MODIFIED
2026-05-08 17:16
EPSS (Prob. Exploit)
5.98%
Top 6.7%
🎯 NUCLEI TEMPLATE
DATA SOURCES:
NVD 🔗 2026-05-08 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-10-29 NUCLEI 🔗 2026-11-08

> DESCRIPTION

Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, aseHttpRequestHandler.get_temp_root(), BaseHttpRequestHandler._post() components

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-3rf6-x59v-5jfv CRITICAL

dash-uploader has a directory traversal vulnerability

AFFECTED PACKAGES:
PIP / dash-uploader
>= 0.1.0, <= 0.7.0a2

> NUCLEI TEMPLATES

Des templates Nuclei sont disponibles pour scanner cette vulnérabilité.

🎯
CVE-2026-38360.yaml
http/cves/2026/CVE-2026-38360.yaml
Usage: nuclei -t http/cves/2026/CVE-2026-38360.yaml -u target.com

> HISTORIQUE DES MODIFICATIONS

Première apparition
08/05/2026 17:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://github.com/a1ohadance/CVE-2026-38360
https://github.com/fohrloop/dash-uploader
https://github.com/fohrloop/dash-uploader/blob/dev/dash_uploader/httprequesthand...
https://github.com/fohrloop/dash-uploader/blob/stable/dash_uploader/httprequesth...
https://github.com/fohrloop/dash-uploader/issues/153
https://pypi.org/project/dash-uploader/
« BACK_TO_HOME