CWE-23 Archives - CVE Vulnerability

CVE-2020-4053

Sun, 26 Feb 2023 06:41:53 +0000

In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and copy a file outside of the intended directory. This has been fixed in 3.2.4.

The post CVE-2020-4053 appeared first on CVE Vulnerability.

CVE-2020-25172

Sun, 26 Feb 2023 06:39:39 +0000

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files.

The post CVE-2020-25172 appeared first on CVE Vulnerability.

CVE-2019-20916

Sun, 26 Feb 2023 06:32:38 +0000

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

The post CVE-2019-20916 appeared first on CVE Vulnerability.

CVE-2019-19287

Sun, 26 Feb 2023 06:32:02 +0000

A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication.

The post CVE-2019-19287 appeared first on CVE Vulnerability.

CVE-2019-18338

Sun, 26 Feb 2023 06:31:44 +0000

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker with network access to the CCS server could exploit this vulnerability to list arbitrary directories or read files outside of the CCS application context.

The post CVE-2019-18338 appeared first on CVE Vulnerability.

CVE-2019-10743

Sun, 26 Feb 2023 06:29:18 +0000

All versions of archiver allow attacker to perform a Zip Slip attack via the “unarchive” functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated to the target extraction directory, which results in the final path ending up outside of the target folder. For instance, a zip may hold a file with a “../../file.exe” location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code, the problem can turn into an arbitrary code execution issue quite easily.

The post CVE-2019-10743 appeared first on CVE Vulnerability.

CVE-2021-41178

Thu, 23 Feb 2023 14:11:56 +0000

Nextcloud is an open-source, self-hosted productivity platform. Prior to versions 20.0.13, 21.0.5, and 22.2.0, a file traversal vulnerability makes an attacker able to download arbitrary SVG images from the host system, including user provided files. This could also be leveraged into a XSS/phishing attack, an attacker could upload a malicious SVG file that mimics the Nextcloud login form and send a specially crafted link to victims. The XSS risk here is mitigated due to the fact that Nextcloud employs a strict Content-Security-Policy disallowing execution of arbitrary JavaScript. It is recommended that the Nextcloud Server be upgraded to 20.0.13, 21.0.5 or 22.2.0. There are no known workarounds aside from upgrading.

The post CVE-2021-41178 appeared first on CVE Vulnerability.

CVE-2021-41127

Thu, 23 Feb 2023 14:11:54 +0000

Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model `tar.gz` file which allows a malicious actor to craft a `model.tar.gz` file which can overwrite or replace bot files in the bot directory. The vulnerability is fixed in Rasa 2.8.10. For users unable to update ensure that users do not upload untrusted model files, and restrict CLI or API endpoint access where a malicious actor could target a deployed Rasa instance.

The post CVE-2021-41127 appeared first on CVE Vulnerability.

CVE-2021-34605

Thu, 23 Feb 2023 14:10:17 +0000

A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitrary file write privilege when opening a specially-crafted project file. This vulnerability can be triggered by manually opening an infected project file, or by initiating an upload program request from an infected Xinje PLC. This can result in remote code execution, information disclosure and denial of service of the system running the XINJE XD/E Series PLC Program Tool.

The post CVE-2021-34605 appeared first on CVE Vulnerability.

CVE-2021-32964

Thu, 23 Feb 2023 14:09:54 +0000

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system.

The post CVE-2021-32964 appeared first on CVE Vulnerability.