2 matches found
Path traversal
Magento UPWARD-php version 1.1.4 and earlier is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 and earlier due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which...
4CVSS5.1AI score0.08514EPSS
SaveExploits0References2Affected Software2
CVE-2021-21064: Improper Limitation of a Pathname to a Restricted Directory
Magento UPWARD-php version 1.1.4 and earlier is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 and earlier due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which...
4.9CVSS6.2AI score0.08514EPSS
SaveExploits0References2
20