Vulnerability in N/a
CVE-2021-3374
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.
EPSS: 0.833 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- github.com/colemanjp/shinyserver-directory-traversal-source-code-leak (x_refsource_MISC)
- blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/ (x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-3374?
- CVE-2021-3374 is a vulnerability in N/a. Published 2021-04-02.
- Is CVE-2021-3374 known to be exploited?
- 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.