CVE-2021-3374: Rstudio Shiny Server

Medium severity, CVSS 5.3. EPSS: 14.4% chance of exploitation in the next 30 days.

Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.

Affected products

• Rstudio Shiny Server: before 1.5.16 (fixed in 1.5.16)

Published 2021-04-02. Last modified 2026-06-17.