Описание
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 1.10.00.005 (исключая)
cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00149
Низкий
8.1 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 8.1
github
почти 2 года назад
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
EPSS
Процентиль: 36%
0.00149
Низкий
8.1 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-22