Information Disclosure

melisplatform/melis-asset-manager is vulnerable to information disclosure. The vulnerability is due to the displayFile function not properly checking whether the requested file is outside the restricted directory, allowing an attacker to read arbitrary files...

melisplatform/melis-asset-manager vulnerable to Path Traversal

Impact Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-asset-manager = 5.0.1. Patches...

GHSA-7FJ2-RRQ6-RPHQ melisplatform/melis-asset-manager vulnerable to Path Traversal

Impact Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-asset-manager = 5.0.1. Patches...

CVE-2022-39296: Improper Limitation of a Pathname to a Restricted Directory

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require...

Melis Platform 路径遍历漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A path traversal vulnerability exists in Melis Platform MelisAssetManager. An attacker exploiting this vulnerability could read arbitrary files, which could lead to the disclosure of sensitive...

CVE-2022-39296

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of "melisplatform/melis-asset-manager", leading to the disclosure of sensitive information. Conducting this attack does not require...