Mar10 vulnerabilities
We track 2 vulnerabilities in Mar10 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Mar10 vulnerabilities
- 8.8 High severity
wsgidav: Improper Neutralization of Special Elements used in an SQL Command
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysql_dav_provider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected _exist
- 7.1 High severity
wsgidav: Improper Limitation of a Pathname to a Restricted Directory
WsgiDAV is a generic and extendable WebDAV server based on WSGI. WsgiDAV 4.3.3 and prior can allow a WebDAV request path containing an encoded parent-directory segment to escape the configured filesystem share root in a specific path layout. The issue is fixed