Non évaluée

An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy...

CVE-2020-36364 Première détection SecPulse May 20, 2021

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy and delete actions) in the ImportController.Create method via a TempFileName field.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
report github.com

Faits clés

Gravité: Non évaluée
Publication: May 20, 2021
Première détection SecPulse: May 20, 2021

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:53