CVE-2024-36079

CVE-2024-36079 concerns Vaultize 21.07.27. The vulnerability arises because the upload flow does not validate the provided filename parameter, allowing a temporary file to be created outside the specified directory when the file is downloaded. An authenticated user could exploit this by uploading...

Vaultize 安全漏洞

Vaultize is an enterprise platform from Vaultize, Inc. A security vulnerability exists in Vaultize version 21.07.27, which stems from a lack of filename filtering, resulting in an arbitrary file upload vulnerability...

PT-2024-26887 · Vaultize · Vaultize

Name of the Vulnerable Software and Affected Versions: Vaultize version 21.07.27 Description: An issue was discovered in the software where there is no check that the filename parameter is correct when uploading files. As a result, a temporary file will be created outside the specified directory...