Описание
Stimulsoft Dashboard.JS directory traversal vulnerability
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
Пакеты
Наименование
stimulsoft-dashboards-js
npm
Затронутые версииВерсия исправления
< 2024.1.3
2024.1.3
Связанные уязвимости
CVSS3: 9.8
nvd
около 2 лет назад
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.