Avalanche123 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Avalanche123 products: 1 record(s), with severity, exploitation and fixes.

Cassandra Web 1

Exploited only (KEV) →

CVE-2020-36939 High · 7.5 Public exploit CWE-22 Jan 27, 2026

Cassandra Web 0.5.0 - Remote File Read

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache Cassandra database credentials.