Количество 4
Количество 4
CVE-2022-25299
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.
CVE-2022-25299
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.
CVE-2022-25299
This affects the package cesanta/mongoose before 7.6. The unsafe handl ...
GHSA-q66h-r8q8-x284
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-25299 This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder. | CVSS3: 9.8 | 0% Низкий | почти 4 года назад | |
CVE-2022-25299 This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder. | CVSS3: 9.8 | 0% Низкий | почти 4 года назад | |
CVE-2022-25299 This affects the package cesanta/mongoose before 7.6. The unsafe handl ... | CVSS3: 9.8 | 0% Низкий | почти 4 года назад | |
GHSA-q66h-r8q8-x284 This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder. | 0% Низкий | почти 4 года назад |
Уязвимостей на страницу