Lucene search
+L

2 matches found

OSV
OSV
added 2026/08/30 2:33 p.m.13 views

CVE-2026-82656 Admidio before 5.0.12 Path Traversal via Photo ZIP Download

Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users with album-creation rights to include path traversal segments in archive entry names. Attackers can craft malicious album names containing directory traversal sequences that...

2.1CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/30 2:33 p.m.43 views

CVE-2026-82656 Admidio before 5.0.12 Path Traversal via Photo ZIP Download

Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users with album-creation rights to include path traversal segments in archive entry names. Attackers can craft malicious album names containing directory traversal sequences that...

2.6CVSS0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder