PT-2026-45466
CVE-2026-42679
·
Published
2026-05-17
·
Updated
2026-06-01
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Classified Listing versions prior to 5.3.9
Description
An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows for arbitrary file download. This occurs when the application fails to properly validate user-supplied input used to construct a file path, enabling access to files outside the intended directory.
Recommendations
Update to a version newer than 5.3.8.
Found an issue in the description? Have something to add? Feel free to write us 👾