Lucene search
K

5 matches found

0day.today
0day.today
added 2025/02/09 12:0 a.m.134 views

WebFileSys 2.31.0 Directory Traversal Vulnerability

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

5.3CVSS6.7AI score0.05438EPSS
Exploits3
Vulnrichment
Vulnrichment
added 2025/02/06 12:0 a.m.6 views

CVE-2024-53586

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

5.3AI score0.05438EPSS
Exploits3References1
Packet Storm
Packet Storm
added 2025/02/06 12:0 a.m.312 views

WebFileSys 2.31.0 Directory Traversal

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing...

7.3AI score0.05438EPSS
Exploits3
CVE
CVE
added 2025/02/06 12:0 a.m.61 views

CVE-2024-53586

CVE-2024-53586 : WebFileSys 2.31.0 is affected by a directory-traversal in the relPath parameter. A crafted HTTP request (e.g., using ../../.. payloads) can manipulate file paths and gain unauthorized access to sensitive files outside the intended directory. Exploit details are demonstrated in Ex...

5.3CVSS7.1AI score0.05438EPSS
Exploits3References1
Positive Technologies
Positive Technologies
added 2025/02/06 12:0 a.m.4 views

PT-2025-5881 · Unknown · Webfilesys

Name of the Vulnerable Software and Affected Versions: WebFileSys version 2.31.0 Description: An issue in the relPath parameter allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the relPath parameter, attackers can manipulate file pat...

5.3CVSS5.2AI score0.05438EPSS
Exploits3References6
Rows per page
Query Builder