jester project vulnerabilities

Products

• jester 2

Latest jester project CVEs

Newest publication first

1. CVE-2023-50693 An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.

   Published 2024-01-19

   Critical·CVSS 9.8 EPSS 1.0%

   An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.

2. CVE-2018-13034 Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences.

   Published 2018-07-09

   Medium·CVSS 5.3 EPSS 1.8%

   Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.