Lucene search
K

5 matches found

Cvelist
Cvelist
added 2025/11/07 3:2 a.m.6 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS0.00182EPSS
Exploits0References2
OSV
OSV
added 2025/11/07 3:2 a.m.2 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6.9AI score0.00182EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/11/07 3:2 a.m.2 views

CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing...

8.8CVSS6.6AI score0.00182EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/11/04 3:31 p.m.6 views

Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS7.1AI score0.00182EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/11/04 3:31 p.m.2 views

GHSA-4VCX-3PJ3-44M7 Dosage vulnerable to a Directory Traversal through crafted HTTP responses

Impact When downloadinging comic images, Dosage constructs target file names from different aspects of the remote comic page URL, image URL, page content, etc.. While the basename is properly stripped of directory-traversing characters, the file extension is taken from the HTTP Content-Type heade...

8.8CVSS7.1AI score0.00182EPSS
Exploits0References4
Rows per page
Query Builder