Описание
Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.
Ссылки
- Product
- ExploitIssue Tracking
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:aimstack:aim:3.28.0:*:*:*:*:python:*:*
EPSS
Процентиль: 40%
0.00182
Низкий
7 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 7
github
7 месяцев назад
Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.
EPSS
Процентиль: 40%
0.00182
Низкий
7 High
CVSS3
Дефекты
CWE-22