CVE-2023-2909CWE-22

A Directory traversal vulnerability was found on EZ Sync service of ADM

High · published May 31, 2023

CVSS v3.1
8.5
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00673 · 51.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-05-31T09:26Z
EPSS history
Timeline
  • 31 MAY 09:26Z
    A Directory traversal vulnerability was found on EZ Sync service of ADM
    cvelistv5