Lucene search
K

4 matches found

OSV
OSV
added 2020/02/18 6:59 p.m.24 views

GHSA-X8WJ-6M73-GFQP Relative Path Traversal (CWE-23) in chunked uploads in oneup/uploader-bundle

Impact The vulnerability was identified in the web service for a chunked file upload. While the names of the POST parameters vary with the used frontend, their values are always used in the same way to build a path where the chunks are stored and assembled temporarily. By not validating these...

8.8CVSS8.6AI score0.05244EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2020/02/18 6:59 p.m.73 views

Relative Path Traversal (CWE-23) in chunked uploads in oneup/uploader-bundle

Impact The vulnerability was identified in the web service for a chunked file upload. While the names of the POST parameters vary with the used frontend, their values are always used in the same way to build a path where the chunks are stored and assembled temporarily. By not validating these...

8.8CVSS0.9AI score0.05244EPSS
Exploits1References6Affected Software1
Friends Of PHP
Friends Of PHP
added 2020/02/04 11:40 a.m.25 views

Relative Path Traversal (CWE-23) in chunked uploads

Description Impact The vulnerability was identified in the web service for a chunked file upload. While the names of the POST parameters vary with the used frontend, their values are always used in the same way to build a path where the chunks are stored and assembled temporarily. By not validati...

6.5CVSS8.6AI score0.05244EPSS
Exploits1Affected Software1
Friends Of PHP
Friends Of PHP
added 2020/02/04 11:40 a.m.19 views

Relative Path Traversal (CWE-23) in chunked uploads

Impact The vulnerability was identified in the web service for a chunked file upload. While the names of the POST parameters vary with the used frontend, their values are always used in the same way to build a path where the chunks are stored and assembled temporarily. By not validating these...

8.8CVSS8.6AI score0.05244EPSS
Exploits1Affected Software1
Rows per page
Query Builder