9 matches found
CVE-2024-34313
CVE-2024-34313 Description VPL Jail System up to v4.0.2 was discovered to contain a Path Traversal vulnerability allowing arbitrary file overrides and thereby privilege escalation to root user. This vulnerability can be chained with CVE-2024-34312 to take over a Moodle instance remotely without a...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
CVE-2024-34313
The VPL Jail System up to v4.0.2 is vulnerable to a Path Traversal issue in its C++ server. The root cause lies in the ProcessMonitor::writeFile function within jail.cpp, which concatenates the jail user's home directory with a file name provided by the client without sufficient validation. This ...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
PT-2024-25785 · Unknown · Vpl Jail System
Name of the Vulnerable Software and Affected Versions: VPL Jail System versions up to 4.0.2 Description: The issue allows attackers to execute a directory traversal via a crafted request to a public endpoint. Recommendations: For VPL Jail System versions up to 4.0.2, update to a version later tha...
CVE-2024-34313
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
CVE-2024-34313: Improper Limitation of a Pathname to a Restricted Directory
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...
