PT-2021-10935
CVE-2020-23715
·
تاريخ النشر
2021-06-28
·
تاريخ التحديث
2021-07-02
الوصف من
CVSS 3.1
8.6
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Webport CMS version 1.19.10.17121
Description
The issue is related to a Directory Traversal vulnerability. It can be exploited via the
file parameter to the "file/download" endpoint.Recommendations
For Webport CMS version 1.19.10.17121, as a temporary workaround, consider restricting access to the "file/download" endpoint until a patch is available. Avoid using the
file parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾