Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-66q6-24vw-2g98

Опубликовано: 05 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.

EPSS

Процентиль: 98%
0.5751
Средний

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-24

Связанные уязвимости

CVSS3: 7.2
nvd
около 1 месяца назад

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.

CVSS3: 7.2
fstec
6 месяцев назад

Уязвимость инструмента обмена сообщениями и видеоконференций Output Messenger, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 98%
0.5751
Средний

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-24