1 matches found
UBUNTU-CVE-2022-25299
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mghttpupload method may enable attackers to write files to arbitrary locations outside the designated target folder...
9.8CVSS5.9AI score0.01433EPSS
SaveExploits1References4
20