Lucene search
K

7 matches found

Saint
Saint
added 2024/04/08 12:0 a.m.140 views

FileCatalyst Workflow ftpservlet file upload

Added: 04/08/2024 Background FileCatalyst Workflow is a managed file transfer product. Problem The ftpservlet component in the FileCatalyst Workflow web portal is affected by a directory traversal vulnerability which could allow an anonymous user to upload files to arbitrary locations. This leads...

9.8CVSS9.8AI score0.82216EPSS
Exploits4
Saint
Saint
added 2024/04/08 12:0 a.m.234 views

FileCatalyst Workflow ftpservlet file upload

Added: 04/08/2024 Background FileCatalyst Workflow is a managed file transfer product. Problem The ftpservlet component in the FileCatalyst Workflow web portal is affected by a directory traversal vulnerability which could allow an anonymous user to upload files to arbitrary locations. This leads...

9.8CVSS9.8AI score0.82216EPSS
Exploits4
OSV
OSV
added 2024/03/13 3:15 p.m.2 views

CVE-2024-25153

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

9.8CVSS5.9AI score0.82216EPSS
Exploits4References3
NVD
NVD
added 2024/03/13 3:15 p.m.17 views

CVE-2024-25153

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

9.8CVSS9.6AI score0.82216EPSS
Exploits4References3
Prion
Prion
added 2024/03/13 3:15 p.m.28 views

Directory traversal

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

7.5CVSS9.4AI score0.82216EPSS
Exploits4References2
Cvelist
Cvelist
added 2024/03/13 2:10 p.m.18 views

CVE-2024-25153 Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

9.8CVSS9.7AI score0.82216EPSS
Exploits4References2
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.4 views

PT-2024-2196 · Unknown · Filecatalyst Workflow

Name of the Vulnerable Software and Affected Versions: FileCatalyst Workflow versions prior to 5.1.6 Build 114 Description: A directory traversal vulnerability within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ director...

10CVSS8.2AI score0.82216EPSS
Exploits4References46
Rows per page
Query Builder