Lucene search

K
osvGoogleOSV:GHSA-RRHW-54R8-545Q
HistoryMay 25, 2022 - 12:00 a.m.

Path Traversal in FileGator

2022-05-2500:00:39
Google
osv.dev
11
path traversal
filegator
non-admin users
filesystem entries

EPSS

0.001

Percentile

38.2%

Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with ..\ as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files.

EPSS

0.001

Percentile

38.2%

Related for OSV:GHSA-RRHW-54R8-545Q