Lucene search
+L

2 matches found

NVD
NVD
•added 2024/03/13 3:15 p.m.•50 views

CVE-2024-25153

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

9.8CVSS9.6AI score0.41741EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•1 views

CVE-2024-25153: External Control of Assumed-Immutable Web Parameter

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

9.8CVSS6AI score0.41741EPSS
SaveExploits4References3
Rows per page
Query Builder