A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/166181/Xerte-3.10.3-Directory-Traversal.html | Exploit Third Party Advisory VDB Entry |
https://github.com/thexerteproject/xerteonlinetoolkits/commit/48a9880c6ac38f4d215f9143baf3d6e6062a1871 | Patch Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-02-24T20:16:43
Updated: 2022-03-02T18:06:10
Reserved: 2021-12-06T00:00:00
Link: CVE-2021-44665
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-02-24T21:15:07.667
Modified: 2022-03-04T19:28:27.730
Link: CVE-2021-44665
JSON object: View
Redhat Information
No data.
CWE