Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the backup upload process during the initial onboarding window. An attacker can write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive with a manipulated name field in...

CVE-2025-4653: Improper Neutralization of Special Elements used in a Command

Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105...

PT-2025-24699 · Unknown · Pandora Itsm

Name of the Vulnerable Software and Affected Versions: Pandora ITSM version 5.0.105 Description: The issue is related to the improper neutralization of special elements in the backup name field, which may allow OS command injection. Recommendations: For Pandora ITSM version 5.0.105, update to a...