PT-2025-5881 · Unknown · Webfilesys

Name of the Vulnerable Software and Affected Versions: WebFileSys version 2.31.0 Description: An issue in the relPath parameter allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the relPath parameter, attackers can manipulate file pat...

CVE-2024-53586

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

CVE-2024-53586: Improper Limitation of a Pathname to a Restricted Directory

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

CVE-2024-53586

WebFileSys version 2.31.0 is vulnerable to a directory traversal vulnerability (CWE-22) within the relPath parameter. An attacker can send a crafted HTTP request containing traversal payloads to manipulate file paths and gain unauthorized access to sensitive files outside the intended directory. ...