CVE-2024-0882

creationtimestamp| type| source ---|---|--- 2024-01-25 20:26:10+00:00| seen| https://t.me/ctinow/173775 2024-01-31 21:17:17+00:00| seen| https://t.me/ctinow/177093 2024-02-18 14:11:56+00:00| seen| https://t.me/ctinow/187251...

CVE-2024-0882 qwdigital LinkWechat Universal Download Interface resource path traversal

A vulnerability was found in qwdigital LinkWechat 5.1.0. It has been classified as problematic. This affects an unknown part of the file /linkwechat-api/common/download/resource of the component Universal Download Interface. The manipulation of the argument name with the input...

CVE-2024-0882

Summary: CVE-2024-0882 affects qwdigital LinkWechat 5.1.0. The vulnerability is a path traversal in the Universal Download Interface’s resource endpoint; manipulating the name argument with the input /profile/../../../../../etc/passwd can access ../filedir. The issue is exploitable remotely and h...