KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile...
6.5CVSS
6.5AI Score
0.001EPSS
The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to (and the config_text parameter set to the content of the file to be...
8.8CVSS
8.7AI Score
0.005EPSS