JVN#85716574: NeoFiler vulnerable to directory traversal

NeoFiler provided by SkyArts.com contains an issue in processing file names, which may result in a directory traversal (CWE-22) vulnerability.

Impact

A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to access.

Solution

Apply an update
Update to the latest version according to the information provided by the developer.

Products Affected

• NeoFiler version 5.4.3 and earlier
• NeoFiler Free version 5.4.3 and earlier
• NeoFiler Lite version 2.4.2 and earlier