CVE-2018-7490

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the –php-docroot option, allowing directory traversal.

Source: CVE-2018-7490