Directory traversal

2023-11-1718:15:00

PRIOn knowledge base

www.prio-n.com

directory traversal

terramaster

remote attacker

sensitive information

crafted get request

vulnerability

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.7%

JSON

Directory Traversal vulnerability in TerraMaster v.s1.0 through v.2.295 allows a remote attacker to obtain sensitive information via a crafted GET request.

CPENameOperatorVersion
terra-masterge1.0
terra-masterle2.295

CPE	Name	Operator	Version
	terra-master	ge	1.0
	terra-master	le	2.295

References

forum.terra-master.com/cn/viewtopic.php?f=100&t=3842&p=17623