Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cfpx-f979-xm8v

Опубликовано: 22 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257715.

A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257715.

EPSS

Процентиль: 27%
0.00094
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-24

Связанные уязвимости

CVSS3: 6.3
nvd
почти 2 года назад

A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257715.

EPSS

Процентиль: 27%
0.00094
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-24