PT-2013-5710
CVE-2013-5648
·
تاريخ النشر
2013-08-29
·
تاريخ التحديث
2013-08-30
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
libdigidoc versions 3.6.0.0
Description
The issue is related to an absolute path traversal vulnerability in the
handleStartDataFile function. This allows remote attackers to overwrite arbitrary files by using a filename that starts with a / (slash) or `` (backslash) in a DDOC file.Recommendations
For libdigidoc version 3.6.0.0, update to version 3.7.2 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾