Lucene search
PRIOn knowledge basePRION:CVE-2023-2909HistoryMay 31, 2023 - 10:15 a.m.
Design/Logic Flaw
2023-05-3110:15:00
PRIOn knowledge base
www.prio-n.com
9
design flaw
logic flaw
ez sync service
user input
attacker
directory traversal
file deletion
adm 4.0.6.reg2
adm 4.1.0
adm 4.2.1.rge2
nvd
EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.
