CVE-2024-41376

DzzOffice version 2.02.1 is vulnerable to a Directory Traversal flaw located in the user/space/about.php endpoint. An attacker can exploit this by manipulating input to the vulnerable endpoint to access files outside the intended directory structure. As a temporary workaround, it is recommended t...

CVE-2024-41376

dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...