PT-2024-37814

CVE-2024-6707

Published

2024-08-07

Updated

2024-08-08

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue allows attacker-controlled files to be uploaded to arbitrary locations on the web server's filesystem by exploiting a path traversal vulnerability. This enables potential unauthorized access and modification of sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Jaggar Henry

Sean Segreti

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

CWE-434: Unrestricted Upload of File with Dangerous Type