Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7rcp-2v2f-26xw

Опубликовано: 02 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15.

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15.

EPSS

Процентиль: 24%
0.0008
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.9
nvd
больше 2 лет назад

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15.

EPSS

Процентиль: 24%
0.0008
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-22