Описание
Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.
Ссылки
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 25.10 (исключая)
cpe:2.3:a:agora-project:agora-project:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00409
Низкий
7.5 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 7.5
github
23 дня назад
Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.
EPSS
Процентиль: 61%
0.00409
Низкий
7.5 High
CVSS3
Дефекты
CWE-22