Design/Logic Flaw

2023-01-2305:15:00

PRIOn knowledge base

www.prio-n.com

arbitrary file upload

code execution

crafted file

ssh file

zdir v3.2.0

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.

CPENameOperatorVersion
zdireq3.2.0

CPE	Name	Operator	Version
	zdir	eq	3.2.0

References

github.com/helloxz/zdir/issues/90