Lucene search
+L

4 matches found

Veracode
Veracode
•added 2024/10/24 9:16 a.m.•22 views

Directory Traversal

@vendure/asset-server-plugin is vulnerable to Directory Traversal. The vulnerability is due to improper validation in Vendure's asset server plugin, which allows an attacker to craft requests that traverse the server file system, retrieving arbitrary files including sensitive data and crashing th...

9.1CVSS6.6AI score0.60416EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder