7 matches found
Code injection
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...
CVE-2017-1000438
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...
CVE-2017-1000438
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...
CVE-2017-1000438
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...
CVE-2017-1000438
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...
PT-2018-5210
Name of the Vulnerable Software and Affected Versions OMERO versions 5.3.3 and earlier Description A user could create an OriginalFile and adjust its path to point to another user's file on the underlying filesystem, then manipulate the user's data. Recommendations For OMERO versions 5.3.3 and...
CVE-2017-1000438: Undefined Security Weakness
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data...