4 matches found
Directory Traversal
@vendure/asset-server-plugin is vulnerable to Directory Traversal. The vulnerability is due to improper validation in Vendure's asset server plugin, which allows an attacker to craft requests that traverse the server file system, retrieving arbitrary files including sensitive data and crashing th...
9.1CVSS6.6AI score0.60416EPSS
SaveExploits1References5Affected Software1
20