CVE-2026-0805
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Résumé
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com