PT-2026-98206 · Volotat · Anagnorisis
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
volotat Anagnorisis versions prior to 0.4.3
Description
A path traversal issue exists that can be triggered remotely. The flaw is located within the
get file content(), save file content(), move files(), and start streaming() functions of the page.html file. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, consider restricting the use of the
get file content(), save file content(), move files(), and start streaming() functions within the page.html file.Exploit
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Anagnorisis