PT-2022-15704
CVE-2022-22836
·
تاريخ النشر
2022-01-08
·
تاريخ التحديث
2022-01-19
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
CoreFTP Server versions prior to 727
Description
The issue allows an authenticated attacker to perform directory traversal, enabling them to create files outside the intended directory structure by including ../ in an HTTP PUT request.
Recommendations
For CoreFTP Server versions prior to 727, update to version 727 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾