Path Traversal

2024-02-1509:31:38

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

digdag

path traversal

information disclosure

localfilelogserverfactory.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

Percentile

10.5%

JSON

Digdag is vulnerable to Path Traversal. The vulnerability is due to a lack of validation of file paths within LocalFileLogServerFactory.java when its configured to store logs locally… This could allow an attacker to access and read sensitive data, configuration files, or other information stored on the system, leading to Information Disclosure.