CVE-2023-46863
Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST reques...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com