Zola vulnerabilities

1 known vulnerability in Zola from Getzola. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Zola: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-40274Aug 14, 2023GetzolaEPSS 1.1%

  An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account for