CVE-2018-12563

MEDIUM · CVSS 6.5 EPSS 0.89%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-12563

Severity

MEDIUM

CVSS

6.5

EPSS

0.89%

Original NVD Description

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavaserver and valid yaml.