PT-2026-81297 · Unknown · Liketrek Trek
CVSS v4.0
6.3
Medium
| Vector | AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X |
Name of the Vulnerable Software and Affected Versions
liketrek TREK versions prior to 3.1.0
Description
A path traversal flaw exists in the Public Journey Photo Proxy component within the file
server/src/nest/journey/journey-public.controller.ts. This issue allows a remote attacker to perform a manipulation that results in unauthorized access to files and directories. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.Recommendations
Update to version 3.1.0.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Liketrek Trek