MKdocs 漏洞列表

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability (see references) because the dev server must be used in an unsafe way (namely public) to have this vulnerability exploited.

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability (see references) because the dev server must be used in an unsafe way (namely public) to have this vulnerability exploited.

MkDocs是一个快速、简单、华丽的静态网站生成器，适用于构建项目文档。mkdocs1.2.2内置开发服务器允许使用端口8000进行目录遍历，从而使远程攻击能够获取敏感信息.