CVE-2022-26315

qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified by the uploader...

CVE-2022-26315

CVE-2022-26315 affects qrcp (up to version 0.8.4) in receive mode and is due to inadequate sanitization that allows directory traversal via the uploader-specified filename. This can enable access to parent directories if exploited. Root cause and impact are stated in multiple sources (Red Hat, NV...