Lucene search

K
freebsdFreeBSD2F38C6A2-04A4-11EE-8CB0-E41F13B9C674
HistoryNov 23, 2022 - 12:00 a.m.

qpress -- directory traversal

2022-11-2300:00:00
vuxml.freebsd.org
5
qpress
directory traversal
vulnerability
percona xtrabackup

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.003

Percentile

68.7%

[email protected] reports:

qpress before PierreLvx/qpress 20220819 and before version 11.3,
as used in Percona XtraBackup and other products, allows directory
traversal via …/ in a .qp file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchqpress< 11.3UNKNOWN
FreeBSDanynoarchxtrabackup8< 8.0.32UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.003

Percentile

68.7%

Related for 2F38C6A2-04A4-11EE-8CB0-E41F13B9C674