Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-448j-jp63-mj88

Опубликовано: 02 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.4
CVSS3: 8.8

Описание

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.

EPSS

Процентиль: 16%
0.00052
Низкий

9.4 Critical

CVSS4

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
nvd
4 месяца назад

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.

EPSS

Процентиль: 16%
0.00052
Низкий

9.4 Critical

CVSS4

8.8 High

CVSS3

Дефекты

CWE-22