Описание
Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hyphensolutions:chameleon_power:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00092
Низкий
7.5 High
CVSS3
Дефекты
CWE-35
CWE-22
Связанные уязвимости
CVSS3: 7.5
github
около 2 лет назад
Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files.
EPSS
Процентиль: 26%
0.00092
Низкий
7.5 High
CVSS3
Дефекты
CWE-35
CWE-22