Lucene search
+L

91 matches found

Cvelist
Cvelist
•added 2023/03/06 7:21 a.m.•42 views

CVE-2023-1191 fastcms ZIP File TemplateController.java path traversal

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

5.8CVSS7.2AI score0.00908EPSS
SaveExploits1References4
Mend
Mend
•added 2023/03/06 7:21 a.m.•9 views

CVE-2023-1191

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

7.2CVSS0.00908EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/03/06 12:00 a.m.•20 views

PT-2023-16811 · Fastcms · Fastcms

Name of the Vulnerable Software and Affected Versions: fastcms affected versions not specified Description: A problematic vulnerability has been found in fastcms, affecting an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path...

7.2CVSS5.1AI score0.00908EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/06 12:00 a.m.•8 views

CVE-2023-1191: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

7.2CVSS5.3AI score0.00908EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/25 11:15 a.m.•36 views

CVE-2020-36628

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

9.8CVSS0.00907EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/12/25 11:15 a.m.•25 views

CVE-2020-36628

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

9.8CVSS6.9AI score
SaveExploits0References3
Prion
Prion
•added 2022/12/25 11:15 a.m.•28 views

Path traversal

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

7.5CVSS9.4AI score0.00907EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/12/25 10:19 a.m.•45 views

CVE-2020-36628 Calsign APDE ZIP File CopyBuildTask.java handleExtract path traversal

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

5.5CVSS9.7AI score0.00907EPSS
SaveExploits0References3
Mend
Mend
•added 2022/12/25 10:19 a.m.•5 views

CVE-2020-36628

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

9.8CVSS0.00907EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/25 10:19 a.m.•64 views

CVE-2020-36628

Summary (CVE-2020-36628, Calsign APDE): A path traversal vulnerability exists in the ZIP File Handler’s CopyBuildTask.java handleExtract function of Calsign APDE. Versions prior to 0.5.2-pre2-alpha are affected; upgrading to 0.5.2-pre2-alpha mitigates the issue. The CVE impact is tied to untruste...

9.8CVSS7.6AI score0.00907EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/25 12:00 a.m.•9 views

CVE-2020-36628: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

9.8CVSS5.2AI score0.00907EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/25 12:00 a.m.•15 views

PT-2022-9023 · Calsign · Calsign Apde

Name of the Vulnerable Software and Affected Versions: Calsign APDE versions prior to 0.5.2-pre2-alpha Description: A critical issue has been found in the ZIP File Handler component of Calsign APDE, affecting the handleExtract function in the file...

9.8CVSS5.8AI score0.00907EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/12/14 12:30 p.m.•29 views

SCIFIO vulnerable to Path Traversal

A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...

9.8CVSS9AI score0.00582EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2022/12/14 12:30 p.m.•63 views

GHSA-CMWM-45MJ-MPG3 SCIFIO vulnerable to Path Traversal

A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...

9.8CVSS7.8AI score0.00582EPSS
SaveExploits0References4
NVD
NVD
•added 2022/12/14 12:15 p.m.•39 views

CVE-2022-4494

A vulnerability, which was classified as critical, has been found in bspkrs MCPMappingViewer. Affected by this issue is the function extractZip of the file src/main/java/bspkrs/mmv/RemoteZipHandler.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack may be...

9.8CVSS0.00548EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/14 12:15 p.m.•35 views

CVE-2022-4493

A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...

9.8CVSS0.00582EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/14 12:15 p.m.•28 views

Path traversal

A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...

7.5CVSS9.5AI score0.00582EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/12/14 12:15 p.m.•29 views

Path traversal

A vulnerability, which was classified as critical, has been found in bspkrs MCPMappingViewer. Affected by this issue is the function extractZip of the file src/main/java/bspkrs/mmv/RemoteZipHandler.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack may be...

7.5CVSS9.3AI score0.00548EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/12/14 12:00 a.m.•70 views

CVE-2022-4494

The CVE-2022-4494 entry affects bspkrs MCPMappingViewer, specifically the ZIP File Handler’s RemoteZipHandler.extractZip function. The root cause is a path traversal vulnerability in the extraction logic, which could be exploited remotely. The issue is documented with a patch identifier (6e602746...

9.8CVSS7.9AI score0.00548EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2022/12/14 12:00 a.m.•26 views

CVE-2022-4493 scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal

A vulnerability classified as critical was found in scifio. Affected by this vulnerability is the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File Handler. The manipulation leads to path traversal. The attack can be...

6.3CVSS6.5AI score
SaveExploits0References4
Rows per page
Query Builder