Non évaluée

In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files...

CVE-2021-41714 Première détection SecPulse May 24, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files on the Tipask server such as .env, /etc/passwd, laravel.log, causing infomation leakage.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory yuque.com
patch github.com
report github.com

Faits clés

Gravité: Non évaluée
Publication: May 24, 2022
Première détection SecPulse: May 24, 2022

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54