Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value 2
for chunks
parameter to bypass fileName
sanitization.
CPE | Name | Operator | Version |
---|---|---|---|
projectsend | eq | r753 | |
projectsend | eq | r756 | |
projectsend | eq | r1270 | |
projectsend | eq | r1053 | |
projectsend | eq | r1070 | |
projectsend | eq | r559 | |
projectsend | eq | r1295 | |
projectsend | eq | r754 |