Directory traversal

2023-03-0822:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

wyomind help desk

magento 2

file attachment

arbitrary code

9.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

JSON

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.

CPENameOperatorVersion
help_desklt1.3.7

CPE	Name	Operator	Version
	help_desk	lt	1.3.7

References

www.exploit-db.com/exploits/50113

www.wyomind.com/magento2/helpdesk-magento-2.html