CVE-2018-7490

CVE-2018-7490 is a directory traversal vulnerability in uWSGI versions prior to 2.0.17, specifically affecting the --php-docroot option, which allows attackers to access arbitrary files outside the intended document root. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity and no user interaction required, potentially leading to full confidentiality compromise. While not listed on CISA KEV, exploit code is publicly available via ExploitDB and Nuclei templates, suggesting a high potential for exploitation, despite a lack of widespread community discussion or media coverage.