Lucene search

K
githubGitHub Advisory DatabaseGHSA-X38C-V778-W56M
HistoryJul 26, 2024 - 6:30 p.m.

ICEcoder Path Traversal vulnerability

2024-07-2618:30:38
CWE-22
GitHub Advisory Database
github.com
2
icecoder
path traversal
vulnerability
backup versions
software

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.9

Confidence

High

ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.

Affected configurations

Vulners
Node
icecodericecoderRange8.1
VendorProductVersionCPE
icecodericecoder*cpe:2.3:a:icecoder:icecoder:*:*:*:*:*:*:*:*

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

6.9

Confidence

High

Related for GHSA-X38C-V778-W56M