CVE-2026-0963
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
概要
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com