PT-2022-11427
CVE-2021-41551
·
تاريخ النشر
2022-01-18
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Leostream Connection Broker version 9.0.40.17
Description
The issue allows administrators to conduct directory traversal attacks by uploading a ZIP file that contains a symbolic link. This can potentially lead to unauthorized access to sensitive files or directories.
Recommendations
For Leostream Connection Broker version 9.0.40.17, consider restricting the upload of ZIP files or implementing validation checks to prevent the inclusion of symbolic links as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾