4 matches found
Erxes Path Traversal vulnerability
In Erxes 1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler...
5.4CVSS6.1AI score0.00404EPSS
SaveExploits1References4Affected Software1
GHSA-2977-5PHP-6789 Erxes Path Traversal vulnerability
In Erxes 1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler...
7.1CVSS6.1AI score0.00404EPSS
SaveExploits1References4
CVE-2024-57189: Improper Limitation of a Pathname to a Restricted Directory
In Erxes 1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler...
5.4CVSS6.1AI score0.00404EPSS
SaveExploits1References1
20