Lucene search
HistoryJun 10, 2024 - 5:16 p.m.
CVE-2024-35744
cve-2024-35744
improper limitation of pathname
restricted directory
file manipulation
upunzipper 1.0.0
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
0.0005 Low
EPSS
Percentile
16.3%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Ravidhu Dissanayake Upunzipper allows Path Traversal, File Manipulation.This issue affects Upunzipper: from n/a through 1.0.0.
Affected configurations
Node
upunzipper_projectupunzipperRange≤1.0.0wordpress
Related
vulnrichment
vulnrichment
wpvulndb
wpvulndb
Upunzipper <= 1.0.0 - Authenticated (Admin+) Arbitrary File Deletion
2024-06-12 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-35744
2024-06-10 17:16:30
wordfence
wordfence
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
0.0005 Low
EPSS
Percentile
16.3%
Related for NVD:CVE-2024-35744