{"id":"CVE-2021-32061","details":"S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a \u003cKey\u003e../ substring in a ListBucketResult element.","aliases":["GHSA-qppg-v75c-r5ff","PYSEC-2021-433"],"modified":"2026-07-08T20:58:28.671395Z","published":"2021-11-29T03:15:06.713Z","references":[{"type":"ADVISORY","url":"https://github.com/sa7mon/S3Scanner/issues/122"},{"type":"ADVISORY","url":"https://github.com/sa7mon/S3Scanner/releases/tag/2.0.2"},{"type":"ADVISORY","url":"https://vuln.ryotak.me/advisories/62"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sa7mon/s3scanner","events":[{"introduced":"0"},{"fixed":"fafa30a3bd35b496b3f7db9bfc35b75a8a06bcd1"}],"database_specific":{"cpe":"cpe:2.3:a:s3scanner_project:s3scanner:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.0.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["2.0.1","2.0.0","1.0.0","0.2.0","0.1.1","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32061.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}