PT-2026-55516 · Unknown · Lucene.Net.Replicator
CVSS v4.0
8.9
High
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/AU:Y/RE:L |
Name of the Vulnerable Software and Affected Versions
Apache Lucene.Net.Replicator versions 4.8.0-beta00005 through 4.8.0-beta00017
Description
A Path Traversal issue exists in the Lucene.Net.Replicator library, which allows an unauthenticated user to perform an arbitrary file read on the replication server. Path Traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables that influence the path of a file or directory.
Recommendations
Upgrade to version 4.8.0-beta00018.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lucene.Net.Replicator