Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h2q9-p4wq-924f

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.

EPSS

Процентиль: 99%
0.77303
Высокий

Дефекты

CWE-22

Связанные уязвимости

nvd
около 11 лет назад

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.

EPSS

Процентиль: 99%
0.77303
Высокий

Дефекты

CWE-22