CVE Intelligence

Avalanche123 Cassandra Web vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Avalanche123 Cassandra Web: 1 record(s), with affected versions and fixes.

CVE-2020-36939 High · 7.5 Public exploit CWE-22 Jan 27, 2026
Cassandra Web 0.5.0 - Remote File Read
Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache Cassandra database credentials.