CVE-2024-47818

Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete arbitrary files on the filesystem by calling the "sync/cleansyncdir" endpoint. The "dirname" POST parameter is not validated/sanitized and is used to construct the "syncDir" tha...

CVE-2024-47818: Improper Limitation of a Pathname to a Restricted Directory

Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete arbitrary files on the filesystem by calling the sync/cleansyncdir endpoint. The dirname POST parameter is not validated/sanitized and is used to construct the syncDir that is...