EUVD-2021-28041

Malicious code in bioql PyPI...

CVE-2021-40886

Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value 2 for chunks parameter to bypass fileName sanitization...

CVE-2021-40886

Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value 2 for chunks parameter to bypass fileName sanitization...

PT-2021-23003

Name of the Vulnerable Software and Affected Versions Projectsend version r1295 Description The issue allows a user with the Uploader role to bypass fileName sanitization by setting the value of the chunks parameter to 2, potentially leading to a directory traversal vulnerability. Recommendations...

CVE-2021-40886: Improper Limitation of a Pathname to a Restricted Directory

Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value 2 for chunks parameter to bypass fileName sanitization...

ProjectSend 路径遍历漏洞

ProjectSend is a free, client-oriented, private file sharing web application. A directory traversal vulnerability exists in Projectsend version r1295. An attacker can exploit this vulnerability by adding the value 2 to the chunks parameter to bypass fileName validation...