Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-76c5-v32j-jj2x

Опубликовано: 13 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to access files and directories that are outside the restricted directory and also to overwrite arbitrary files. Exploitation of this issue does not requires user interaction and attack complexity is high.

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to access files and directories that are outside the restricted directory and also to overwrite arbitrary files. Exploitation of this issue does not requires user interaction and attack complexity is high.

EPSS

Процентиль: 18%
0.00057
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
больше 1 года назад

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to access files and directories that are outside the restricted directory and also to overwrite arbitrary files. Exploitation of this issue does not requires user interaction and attack complexity is high.

CVSS3: 6.3
fstec
больше 1 года назад

Уязвимость программного средства для работы с электронной подписью и управления документами Acrobat Mobile Sign, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю обойти существующие ограничения безопасности и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 18%
0.00057
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-22