CVE-2022-0665

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2...

CVE-2022-0665 Path Traversal in pimcore/pimcore

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2...

CVE-2022-0665

Vulnerability summary (CVE-2022-0665) : A path traversal flaw exists in pimcore/pimcore prior to version 10.3.2. The vulnerability stems from insufficient validation of the importFile parameter at the endpoint /admin/translation/import, allowing an attacker to delete arbitrary files on the server...