{"id":"CVE-2020-15101","aliases":["GHSA-7pmh-vrww-25xx","PYSEC-2020-233"],"url":"https://o3.security/vulnerability/CVE-2020-15101","summary":"freewvs's nested directory structure can interrupt scan","details":"### Impact\nA directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of potentially untrusted users.\n\n### Patches\nThis has been fixed in this commit by limiting the recursion to 500 directories:\nhttps://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e6078803143\n\nThis issue was discovered by Hanno Böck.","published":"2020-07-14T22:15:10.860Z","modified":"2026-10-20T10:51:52.286983876Z","cvss":{"score":3.3,"severity":"LOW","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"},"epss":{"score":0.00693,"percentile":0.49855,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"freewvs","fixedVersion":"0.1.1"}],"fix":{"url":"https://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e6078803143","label":"schokokeksorg/freewvs@83a6b55"},"references":[{"type":"ADVISORY","url":"https://github.com/schokokeksorg/freewvs/security/advisories/GHSA-7pmh-vrww-25xx"},{"type":"FIX","url":"https://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e6078803143"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15101"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/freewvs/PYSEC-2020-233.yaml"},{"type":"PACKAGE","url":"https://github.com/schokokeksorg/freewvs"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-20T10:51:52.286983876Z"}}