01 Record

CVE-2026-48099

WsgiDAV encoded dot segments can escape filesystem share roots

HighPUBLISHEDCNA: GitHub_M

Base score7.1 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

02 Description

WsgiDAV encoded dot segments can escape filesystem share roots

Published: 2026-08-13 19:15Z23 HR AGO
Last updated: 2026-08-14 16:35Z2 HR AGO
Reserved: 2026-05-20
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 7.1)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Weaknesses: CWE-22
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: cf44f8254ac85040ff94c5d0fdbd03977d435de129221cf833c18fe71c79e831

VendorProductVersionsPlatforms

mar10wsgidav< 4.3.4—