PT-2022-17649
CVE-2022-26068
·
تاريخ النشر
2022-05-01
·
تاريخ التحديث
2022-05-11
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
pistacheio/pistache versions prior to 0.0.3.20220425
Description
The issue allows directory traversal, enabling the fetching of arbitrary files from the server. This is a significant security concern as it could lead to unauthorized access to sensitive data.
Recommendations
For versions prior to 0.0.3.20220425, update to version 0.0.3.20220425 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories on the server to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾