818 matches found
CVE-2023-4897
CVE-2023-4897 describes a Relative Path Traversal in mintplex-labs/anything-llm prior to 0.0.1. The vulnerability stems from insufficient validation of the filename parameter in the data-exports endpoint, allowing a crafted request to traverse directories and access sensitive local files as demon...
AnythingLLM Security Vulnerability
AnythingLLM is a business-compliant document chatbot. A security vulnerability exists in versions of AnythingLLM prior to 0.0.1 that stems from the presence of relative path traversal...
PT-2023-31022 · Unknown · Anything-Llm
Name of the Vulnerable Software and Affected Versions: anything-llm versions prior to 0.0.1 Description: The issue is related to Relative Path Traversal in the GitHub repository mintplex-labs/anything-llm. Recommendations: For versions prior to 0.0.1, update to version 0.0.1 or later to resolve t...
CVE-2023-34117
Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...
Zoom Client 路径遍历漏洞
Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK prior to version 5.15.0 that stems from relative path traversal. It could allow unauthorized users to achieve information disclosure via...
CVE-2022-42474
A relative path traversal vulnerability CWE-23 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged...
CVE-2022-42474
CVE-2022-42474 is a path traversal vulnerability in Fortinet FortiOS (7.2.0–7.2.3, 7.0.0–7.0.9, and earlier 6.4.12), FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7), and FortiSwitchManager (7.2.0–7.2.1, before 7.0.1). The issue allows a privileged attacker to delete arbitrary directories in the filesystem ...
CVE-2023-27993
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
CVE-2023-27993
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
CVE-2023-27993
Summary: CVE-2023-27993 is a Fortinet FortiADC vulnerability describing a relative path traversal (CWE-23) that could let a privileged attacker delete arbitrary directories via crafted CLI commands. Affected software: FortiADC versions 7.2.0 and prior to 7.1.1. Root cause / impact: Presence of a ...
CVE-2023-27993
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
GHSA-X422-6QHV-P29G Relative path traversal in mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
PYSEC-2023-68
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
Path traversal
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
PT-2023-19040 · Mlflow · Mlflow
Name of the Vulnerable Software and Affected Versions: mlflow versions prior to 2.3.1 Description: The issue is related to a Relative Path Traversal in the GitHub repository mlflow/mlflow. Recommendations: For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue...
CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
CVE-2023-2356
CVE-2023-2356 is a Relative Path Traversal flaw in mlflow/mlflow before 2.3.1. The connected sources (Nuclei template, OSV entries, GHSA advisories) describe a vulnerability allowing traversal to read sensitive server files (LFI) via a crafted path. Affected software: mlflow/mlflow, versions prio...