PT-2026-81297
CVE-2026-78886
·
تاريخ النشر
2026-08-25
·
تاريخ التحديث
2026-08-25
الوصف من
CVSS 4.0
6.3
متوسطةالمقاييسAV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
Name of the Vulnerable Software and Affected Versions
liketrek TREK versions prior to 3.1.0
Description
A path traversal flaw exists in the Public Journey Photo Proxy component within the file
server/src/nest/journey/journey-public.controller.ts. This issue allows a remote attacker to perform a manipulation that results in unauthorized access to files and directories. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.Recommendations
Update to version 3.1.0.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾