CVE-2015-10024CWE-22

hoffie larasync file_storage.go path traversal

Medium · published January 7, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/file_storage.go. The manipulation leads to path traversal. The name of the patch is 776bad422f4bd4930d09491711246bbeb1be9ba5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217612.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00918 · 59.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-01-07T12:39Z
EPSS history
Timeline
  • 07 JAN 12:39Z
    hoffie larasync file_storage.go path traversal
    cvelistv5