Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46412
HistoryApr 15, 2024 - 8:55 a.m.

Path Traversal

2024-04-1508:55:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
path traversal
input validation
grapesjs builder
filemanagercontroller.php
critical files
media folders
logged-in users

6.7 Medium

AI Score

Confidence

High

mautic/core is vulnerable to Path Traversal. The vulnerability is due to inadequate input validation in the GrapesJS builder implementation within FileManagerController.php, allowing logged-in users to delete critical files outside media folders.

6.7 Medium

AI Score

Confidence

High

Related for VERACODE:46412