Описание
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:openwebui:open_webui:0.1.105:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00203
Низкий
8.8 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-22
CWE-22
Связанные уязвимости
CVSS3: 7.5
github
больше 1 года назад
Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.
EPSS
Процентиль: 42%
0.00203
Низкий
8.8 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-22
CWE-22