Non évaluée

util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be...

CVE-2018-11248 Première détection SecPulse May 19, 2018

Description d'origine La description telle que publiée par la source (souvent en anglais).

util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be stored in an unintended directory because of Directory Traversal.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

report github.com

Faits clés

Gravité: Non évaluée
Publication: May 19, 2018
Première détection SecPulse: May 19, 2018

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49