AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2008-0252

HIGH · CVSS 7.5 EPSS 2.65%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-01-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2008-0252
Severity
HIGH
CVSS
7.5
EPSS
2.65%

Original Filing — NVD Description

Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie.