Lucene search

K
osvGoogleOSV:GHSA-Q7HX-MRV5-6MRP
HistoryMay 24, 2022 - 5:05 p.m.

HashBrown CMS Directory Traversal

2022-05-2417:05:42
Google
osv.dev
4

0.002 Low

EPSS

Percentile

54.3%

An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.

CPENameOperatorVersion
hashbrown-cmslt1.3.2

0.002 Low

EPSS

Percentile

54.3%

Related for OSV:GHSA-Q7HX-MRV5-6MRP