Описание
Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the web root which may lead to data leakage.
Ссылки
- Release Notes
- Vendor Advisory
- Release Notes
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 3.0.0 (включая) до 3.8.9 (исключая)
cpe:2.3:a:fortra:filecatalyst_direct:*:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00293
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-22
CWE-22
Связанные уязвимости
CVSS3: 5.3
github
почти 2 года назад
Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the web root which may lead to data leakage.
EPSS
Процентиль: 52%
0.00293
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-22
CWE-22