Threats tagged 'ghsa-xc53-2vgx-jv3x'

Tornado versions prior to 6.6 have a path traversal vulnerability in the RequestHandler.static_url() and get_version() methods. This flaw allows attackers who can control input to static_url() to use ../ sequences to hash files outside the intended static_path directory. Attackers can obtain SHA-512 hashes of readable files to confirm their existence or reference special files like /dev/zero to cause a denial of service by blocking the event loop indefinitely.