CVE-2024-25153

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially craft...

FileCatalyst Workflow Web Portal Security Vulnerability

FileCatalyst Workflow Web Portal is a Web-based application from FileCatalyst, Inc. A security vulnerability exists in FileCatalyst Workflow Web Portal prior to 5.1.6 Build 114 that stems from the presence of a path traversal vulnerability. An attacker could use this vulnerability to upload files...