Lucene search
PRIOn knowledge basePRION:CVE-2024-25153HistoryMar 13, 2024 - 3:15 p.m.
Directory traversal
2024-03-1315:15:00
PRIOn knowledge base
www.prio-n.com
15
ftpservlet
filecatalyst workflow
uploadtemp directory
post request
documentroot
jsp files
web shells
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
Related
saint
saint
FileCatalyst Workflow ftpservlet file upload
2024-04-08 00:00:00
FileCatalyst Workflow ftpservlet file upload
2024-04-08 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2024-25153
2024-03-13 15:15:50
cve
cve
CVE-2024-25153
2024-03-13 15:15:50
githubexploit
githubexploit
Exploit for CVE-2024-25153
2024-03-18 09:02:56
Exploit for CVE-2024-25153
2024-03-12 17:26:10
nessus
nessus
Fortra FileCatalyst Workflow Path Traversal (CVE-2024-25153)
2024-05-15 00:00:00
thn
thn
Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool
2024-03-18 12:58:00