Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5ff5-r366-72xm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

EPSS

Процентиль: 78%
0.01115
Низкий

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.4
nvd
больше 4 лет назад

A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.

EPSS

Процентиль: 78%
0.01115
Низкий

Дефекты

CWE-22