2 matches found
CVE-2025-26356
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua setActive endpoint in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests...
7.2CVSS7.1AI score0.00839EPSS
SaveExploits0References1
CVE-2025-26356: Path Traversal: '.../...//'
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua setActive endpoint in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests...
7.2CVSS7.2AI score0.00839EPSS
SaveExploits0References1
20