12 matches found
CVE-2023-40297
CVE-2023-40297 Stakater Forecastle = v1.0.144 在网站组件中允许目录遍历 漏洞类型 目录遍历 产品供应商 Stakater 受影响产品代码库 Forecastle = v1.0.144 受影响组件 受影响组件：URL - https://www.example.com/%5C../etc/passwd 攻击类型 本地 影响：权限提升 true 影响：信息泄露 true 攻击向量 攻击向量： https:///%5C../etc/passwd 攻击者可以通过操纵 URL 来利用目录遍历漏洞，从而越出预期的 Web 目录范围进行访问。通过在 URL...
CVE-2023-40297
Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...
EUVD-2024-1855
Malicious code in bioql PyPI...
GO-2024-2865 Stakater Forecastle has a directory traversal vulnerability in github.com/stakater/Forecastle
Stakater Forecastle has a directory traversal vulnerability in github.com/stakater/Forecastle...
Stakater Forecastle has a directory traversal vulnerability
Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...
GHSA-X8XM-WRJQ-5G54 Stakater Forecastle has a directory traversal vulnerability
Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...
CVE-2023-40297
Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...
CVE-2023-40297
Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...
CVE-2023-40297
CVE-2023-40297 affects Stakater Forecastle 1.0.139 and earlier. The vulnerability is a directory traversal flaw in the website component, enabled by insufficient validation of URL paths (e.g., “\../” sequences), allowing an attacker to access sensitive files. The CVSSv3.1 vector (AV:N/AC:L/PR:N/U...
CVE-2023-40297
Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component...
Stakater Forecastle 安全漏洞
Stakater Forecastle is a control panel from Stakater that dynamically discovers and provides a launchpad to access applications deployed on Kubernetes. A security vulnerability exists in Stakater Forecastle versions 1.0.139 and earlier, which stems from allowing directory traversal in a website...
