Oxidized Web project vulnerabilities
We track 1 vulnerability in Oxidized Web project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Oxidized Web project vulnerabilities
- 9.8 Critical severity
Oxidized Web: Improper Limitation of a Pathname to a Restricted Directory
In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.