12 matches found
CVE-2023-25304
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
CVE-2023-25304
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
CVE-2023-25304
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
Directory traversal
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
CVE-2023-25304: Improper Limitation of a Pathname to a Restricted Directory
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
CVE-2023-25304
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
CVE-2023-25304
Prism Launcher (up to v6.1) is affected by a directory traversal vulnerability triggered by importing a crafted .mrpack file. The underlying issue exposes potential reading of arbitrary files on the host when handling the import, with CVSS 3.1 vector indicating Local access, no privileges require...
CVE-2023-25304
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
CVE-2023-25304
An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack file...
Prism 路径遍历漏洞
Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. A path traversal vulnerability exists in Prism Launcher version 6.1 and earlier. An attacker exploiting this vulnerability could read arbitrary files on the server...
PT-2023-20018 · Unknown · Prism Launcher
Name of the Vulnerable Software and Affected Versions: Prism Launcher versions up to v6.1 Description: The issue allows attackers to perform a directory traversal via importing a crafted .mrpack file. This can be exploited by importing a specifically designed .mrpack file, potentially leading to...
