Lucene search
Lujiefsi7AB3E5CC-E4DF-4130-A359-C8CDFFE7ECB3HistoryDec 25, 2022 - 6:43 a.m.
Path Traversal when upload file
2022-12-2506:43:23
lujiefsi
www.huntr.dev
17
path traversal
file upload
security vulnerability
bug bounty
EPSS
0.001
Percentile
46.5%
metersphere allow users to upload file, but not check the file name.
Poc can be found in the link
Related
nvd
nvd
CVE-2022-46178
2022-12-29 19:15:08
osv
osv
Path Traversal In MeterSpere leads to upload file to any path
2022-12-30 18:03:47
CVE-2022-46178
2022-12-29 19:15:08
github
github
Path Traversal In MeterSpere leads to upload file to any path
2022-12-30 18:03:47
cvelist
cvelist
CVE-2022-46178 Path Traversal In MeterSpere allows file upload to any path
2022-12-29 18:09:38
prion
prion
Design/Logic Flaw
2022-12-29 19:15:00
cve
cve
CVE-2022-46178
2022-12-29 19:15:08