CVE-2022-3939

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely...

CVE-2022-3939 lanyulei ferry API file.go path traversal

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely...

CVE-2022-3939

A vulnerability (CVE-2022-3939) affects the lanyulei ferry API, specifically the file.go handler in API: manipulation of the file parameter enables path traversal. Documented as allowing remote initiation, with VDB-213446 as the identifier. Connected sources corroborate the issue across multiple ...