EUVD-2026-43000

Snipe-IT has a path traversal vulnerability via CSV import image field...

CVE-2026-55469: Improper Limitation of a Pathname to a Restricted Directory

Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user with import and assets.update permissions can place a path traversal string in an asset image field through CSV import and then trigger image deletion, allowing deletion of arbitrary files accessible to the...

PT-2026-57287

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.6.2 Description An authenticated user with import and assets.update permissions can perform a path traversal attack by inserting a malicious string into an asset image field during a CSV import. By subsequently...

CVE-2021-42183

MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/...

CVE-2021-42183

MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/...

CVE-2021-42183: Improper Limitation of a Pathname to a Restricted Directory

MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/...

PT-2022-11551

Name of the Vulnerable Software and Affected Versions MasaCMS version 7.2.1 Description The issue is a path traversal vulnerability in the /index.cfm/ api/asset/image/ API endpoint. This allows for unauthorized access to files on the system. Recommendations For MasaCMS version 7.2.1, as a tempora...

Masa CMS path traversal vulnerability

Masa CMS is a digital experience platform from MasaCMS. A security vulnerability exists in Masa CMS version 7.2.1, which stems from a path traversal vulnerability due to a lack of escaping for path parameters in /index.cfm/api/asset/image/...