CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2021-28485

CVE-2021-28485 affects Ericsson MSC-S (Mobile Switching Center Server) via the SIS web application. The issue is a relative path traversal in an authenticated context, triggered by a specific parameter in HTTPS requests, enabling access to system files not intended for web access. Documented affe...

CVE-2021-28485: Improper Limitation of a Pathname to a Restricted Directory

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

CVE-2023-4914

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

Path traversal

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4914

CVE-2023-4914 is a Relative Path Traversal vulnerability in the Cecil project (cecilapp/cecil) prior to version 7.47.1. The initial and connected sources consistently describe the issue as path traversal, but do not provide explicit root-cause details in these documents. Affected software/version...

CVE-2023-4914 Relative Path Traversal in cecilapp/cecil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4914 Relative Path Traversal in cecilapp/cecil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4914: Relative Path Traversal

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

CVE-2023-4897

CVE-2023-4897 describes a Relative Path Traversal in mintplex-labs/anything-llm prior to 0.0.1. The vulnerability stems from insufficient validation of the filename parameter in the data-exports endpoint, allowing a crafted request to traverse directories and access sensitive local files as demon...

AnythingLLM Security Vulnerability

AnythingLLM is a business-compliant document chatbot. A security vulnerability exists in versions of AnythingLLM prior to 0.0.1 that stems from the presence of relative path traversal...

CVE-2023-4897: Relative Path Traversal

Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

PT-2023-31022 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: anything-llm versions prior to 0.0.1 Description: The issue is related to Relative Path Traversal in the GitHub repository mintplex-labs/anything-llm. Recommendations: For versions prior to 0.0.1, update to version 0.0.1 or later to resolve t...

CVE-2023-31167: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL...

CVE-2023-35359: Relative Path Traversal

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-38185: Relative Path Traversal

Microsoft Exchange Server Remote Code Execution Vulnerability...

Medium: openssh

Issue Overview: An issue was discovered in OpenSSH 7.4 on Amazon Linux 2 and Amazon Linux 1. The fix for CVE-2019-6111 only covered cases where an absolute path is passed to scp. When a relative path is used there is no verification that the name of a file received by the client matches the file...

cypress-image-snapshot path traversal vulnerability

cypress-image-snapshot is an image snapshot plugin from the individual developer Simon Smith. A path traversal vulnerability exists in cypress-image-snapshot, which stems from a vulnerability that could allow a user to pass a relative file path as a snapshot name and access machines outside of th...

CVE-2023-34394: Relative Path Traversal

In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition...

CVE-2023-37461

Metersphere is an opensource testing framework. Files uploaded to Metersphere may define a belongType value with a relative path like ../../../../ which may cause metersphere to attempt to overwrite an existing file in the defined location or to create a new file. Attackers would be limited to...