CVE-2022-25773
Relative Path Traversal in assets file upload
Résumé
Relative Path Traversal in assets file upload
Description d'origine
La description telle que publiée par la source (souvent en anglais).
This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.
- Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web packagist.org