CVE-2022-25297

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save method may enable attackers to write files to arbitrary locations outside the designated target folder...

CVE-2022-25297 Arbitrary File Write

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save method may enable attackers to write files to arbitrary locations outside the designated target folder...

CVE-2022-25297 Arbitrary File Write

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save method may enable attackers to write files to arbitrary locations outside the designated target folder...

CVE-2022-25297

CVE-2022-25297 affects the Drogon framework (drogon) before 1.7.5. The vulnerability arises from unsafe handling of file names during uploads in HttpFile::save(), allowing an attacker to write files to arbitrary locations outside the target directory. Impact is partial to high depending on contex...