3 matches found
CVE-2025-26354: Path Traversal: '.../...//'
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua copy endpoint in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests...
7.2CVSS5.8AI score0.00839EPSS
SaveExploits0References1
20