The vulnerability in the visual integrated development environment for creating Mendix Studio Pro applications arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to write arbitrary files.

The vulnerability in the visual integrated development environment for creating Mendix Studio Pro applications is related to incorrect restrictions on the path to the restricted catalog during module installation. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

CVE-2024-38824

A directory traversal flaw was found in the Salt project. The "recvfile" method can be leveraged to allow arbitrary file writes to the master cache directory. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the solon-faas-luffy component. An attacker can access unauthorized files or inject malicious scripts by crafting specially designed requests. Details A Directory Traversal attack also known as path traversal aim...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the openc3-api/tables endpoint. An attacker can execute a directory traversal and read/modify or delete files. Details A Directory Traversal attack also known as path traversal aims to access files and directorie...

Salt vulnerable to directory traversal attack in file receiving method

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

GHSA-8PCP-R83J-FC92 Salt vulnerable to directory traversal attack in file receiving method

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

CVE-2024-38824 CVE-2024-38824 salt advisory

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

CVE-2024-38824 CVE-2024-38824 salt advisory

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

Salt 安全漏洞

Salt is an automation, infrastructure management, data-driven orchestration, and remote execution application from the Salt project. A security vulnerability exists in Salt that stems from a directory traversal attack in minion file cache creation, which could result in writing or overwriting fil...

Mendix Studio Pro 路径遍历漏洞

Mendix Studio Pro is a visual model-driven IDE from Mendix USA. A path traversal vulnerability exists in Mendix Studio Pro that originates from zip path traversal during module installation and could lead to arbitrary file writes or modifications. The following versions are affected: versions pri...

The vulnerability of the EVLink WallBox software lies in the incorrect limitation of the path name to the restricted access catalog, allowing a violator to write arbitrary files.

The vulnerability of the EVLink WallBox software is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

CVE-2025-5740

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path...

CVE-2025-5740

CVE-2025-5740 describes a CWE-22 path traversal in Schneider Electric EVLink WallBox (home charging station). Affected component is the web server handling file paths; root cause is improper limitation of a pathname to a restricted directory. The vulnerability could allow an authenticated user to...

CVE-2025-5740

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file writes when an authenticated user on the web server manipulates file path...

PT-2025-24622 · Schneider Electric · Evlink Wallbox

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Path Traversal vulnerability exists, which could cause arbitrary file writes when an unauthenticated user on the web server manipulates the file path. This issue is related to the improper...

Schneider Electric EVLink WallBox 路径遍历漏洞

The Schneider Electric EVLink WallBox is a home charging station from the French company Schneider Electric. The Schneider Electric EVLink WallBox suffers from a path traversal vulnerability that stems from improperly restricted pathnames, which can be exploited by an attacker to cause arbitrary...

FastGPT 安全漏洞

FastGPT is an open source knowledge base question and answer system based on a large language model from labring open source. A security vulnerability exists in FastGPT versions prior to 4.9.11, which stems from insufficient sandbox isolation and could result in file reads and writes...

HP Support Assistant 安全漏洞

HP Support Assistant is a suite of solutions from Hewlett-Packard HP in the United States that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant versions prior to 9.44.18.0, which stems from a vulnerability that could lead to arbitra...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the tarfile module's extraction process when using the extractall or extract functions with the filter parameter set to "data" or "tar". An attacker can cause files or symlinks to be created outside the intended...

CVE-2025-31359

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 55879. This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation...