CVE-2022-25297

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save method may enable attackers to write files to arbitrary locations outside the designated target folder...

PT-2022-17193

Name of the Vulnerable Software and Affected Versions drogonframework/drogon versions prior to 1.7.5 Description The issue arises from the unsafe handling of file names during upload using the HttpFile::save method, potentially allowing attackers to write files to arbitrary locations outside the...

Drogon 访问控制错误漏洞

Drogon is an open source HTTP application framework based on C 14/17. Drogon can be used to easily build various types of web application server programs using C. An access control error vulnerability exists in the Drogon framework, which stems from the product's HttpFile::save method not...

CVE-2022-25297: Files or Directories Accessible to External Parties

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save method may enable attackers to write files to arbitrary locations outside the designated target folder...