PT-2026-83721 · Yaojingang · Geoflow
CVSS v2.0
4.7
Medium
| Vector | AV:N/AC:L/Au:M/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
yaojingang GEOFlow versions prior to 2.1.1
Description
A path traversal issue exists in the Image Library Cleanup component within the
unlink() function of the app/Http/Controllers/Admin/ImageLibraryController.php file. A remote attacker can manipulate the file path argument to access or delete files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder.Recommendations
Upgrade to version 2.1.1.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Geoflow