CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

creationtimestamp| type| source ---|---|--- 2022-02-24 18:21:13+00:00| seen| https://t.me/cibsecurity/38015...

CVE-2022-25098

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter...

CVE-2022-25098

ECTouch v2 is affected by an arbitrary file deletion vulnerability caused by insufficient filtering of the filename parameter. The root cause cited is improper validation of file names, enabling deletion of files via this parameter. The connected documents in this set confirm the issue but do not...