Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rjr-9f35-j89h

Опубликовано: 04 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

EPSS

Процентиль: 26%
0.0009
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-22
CWE-23

Связанные уязвимости

CVSS3: 9.9
nvd
больше 2 лет назад

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

EPSS

Процентиль: 26%
0.0009
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-22
CWE-23