Lucene search
+L

13411 matches found

Prion
Prion
•added 2022/12/09 7:15 p.m.•26 views

Arbitrary file deletion

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

6.4CVSS9.2AI score0.00982EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/09 12:00 a.m.•4 views

CVE-2022-45290: Improper Limitation of a Pathname to a Restricted Directory

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

9.1CVSS5.9AI score0.00982EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/12/09 12:00 a.m.•9 views

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

9.4AI score0.00982EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/12/09 12:00 a.m.•40 views

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

9.5AI score0.00982EPSS
SaveExploits1References1
CVE
CVE
•added 2022/12/09 12:00 a.m.•81 views

CVE-2022-45290

CVE-2022-45290 affects Kbase Doc v1.0, with an arbitrary file deletion vulnerability in the component /web/IndexController.java. The CVSS 3.1 data indicates a CRITICAL severity (base score 9.1) with Network attack vector, no privileges required, no user interaction, and impact to both integrity a...

9.1CVSS9.2AI score0.00982EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/12/09 12:00 a.m.•14 views

Kbase Doc 路径遍历漏洞

Kbase Doc is an online preview and editing system for documents by Eko Zhan, an individual developer. A security vulnerability exists in Kbase Doc v1.0, which originates from the deletion of an arbitrary file contained in the component /web/IndexController.java...

9.1CVSS8.4AI score0.00982EPSS
SaveExploits1References2
Mend
Mend
•added 2022/12/09 12:00 a.m.•3 views

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

9.1CVSS0.00982EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/12/09 12:00 a.m.•15 views

PT-2022-27459 · Kbase Doc · Kbase Doc

Name of the Vulnerable Software and Affected Versions: Kbase Doc version 1.0 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component /web/IndexController.java. There is no information provided about the estimated number of potentially affected devic...

9.1CVSS9AI score0.00982EPSS
SaveExploits1References3
Veracode
Veracode
•added 2022/12/08 7:45 a.m.•29 views

Denial Of Service (DoS)

github.com/casdoor/casdoor is vulnerable to denial of service. The vulnerability exists in the DeleteFile function of storage.go due to arbitrary file deletion via uploadFile which allows an attacker to delete arbitrary files in the system...

8.1CVSS7.7AI score0.00901EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/07 3:30 a.m.•35 views

Casdoor arbitrary file deletion vulnerability via uploadFile function

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.1CVSS8AI score0.00901EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2022/12/07 3:30 a.m.•76 views

GHSA-F93F-55C2-8C89 Casdoor arbitrary file deletion vulnerability via uploadFile function

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.1CVSS8.1AI score0.00901EPSS
SaveExploits1References5
NVD
NVD
•added 2022/12/07 2:15 a.m.•37 views

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.1CVSS0.00901EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/07 2:15 a.m.•26 views

Arbitrary file deletion

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

5.5CVSS8.2AI score0.00901EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/12/07 12:00 a.m.•17 views

Casdoor 路径遍历漏洞

Casdoor is an open source Identity and Access Management IAM / Single Sign-On SSO platform with a Web UI that supports OAuth 2.0 / OIDC and SAML authentication. A security vulnerability exists in Casdoor versions prior to v1.126.1, which stems from its uploadFile function that allows an attacker ...

8.1CVSS7.8AI score0.00901EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/12/07 12:00 a.m.•55 views

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.4AI score0.00901EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•7 views

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.2AI score0.00901EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/12/07 12:00 a.m.•22 views

PT-2022-27342 · Casdoor · Casdoor

Name of the Vulnerable Software and Affected Versions: Casdoor versions prior to 1.126.1 Description: The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the uploadFile function. Recommendations: For versions prior to 1.126.1, update to versio...

8.1CVSS7.3AI score0.00901EPSS
SaveExploits1References12
BDU FSTEC
BDU FSTEC
•added 2022/12/07 12:00 a.m.•15 views

The vulnerability of the command-line interface (CLI) of Fortinet FortiAP-U micro-programming system allows a malicious actor to gain unauthorized access to read, modify, and delete files, as well as execute arbitrary commands.

The vulnerability of the command-line interface CLI of Fortinet FortiAP-U micro-programming system lies in incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, and delete files, as wel...

7.8CVSS6.9AI score0.00233EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/12/07 12:00 a.m.•24 views

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.1CVSS8.2AI score
SaveExploits0References3
Mend
Mend
•added 2022/12/07 12:00 a.m.•2 views

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

8.1CVSS0.00901EPSS
SaveExploits1References7
Rows per page
Query Builder