PT-2026-34725 · Pypi+3 · Mako+3
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Mako versions prior to 1.3.11
Description
Mako is a template library written in Python. The
get template() function within TemplateLookup is susceptible to path traversal when a URI begins with //. This occurs due to an inconsistency between two slash-stripping implementations. If an application passes untrusted input directly to get template(), any file readable by the process can be returned as rendered template content.Recommendations
Update to version 1.3.11.
Exploit
Fix
DoS
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Mako
Red Os
Ubuntu