PT-2026-85305 · Moos Ivp · Moos-Ivp
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
MOOS-IvP versions prior to 24.8.2
Description
The SplitHandler fails to properly validate variable names extracted from alog files. On Windows systems, an attacker can provide specially crafted alog files containing backslash sequences in variable names to perform a path traversal, allowing them to escape the designated output directory and append data to arbitrary files.
Recommendations
Update MOOS-IvP to version 24.8.2 or later.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Moos-Ivp