A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the file index.php. The manipulation of the argument f leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250121 was assigned to this vulnerability.
References
Link | Resource |
---|---|
https://note.zhaoj.in/share/nHD5xiHQgHG0 | Broken Link |
https://vuldb.com/?ctiid.250121 | Permissions Required Third Party Advisory |
https://vuldb.com/?id.250121 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: VulDB
Published: 2024-01-09T23:31:03.874Z
Updated: 2024-02-09T19:07:45.573Z
Reserved: 2024-01-09T14:24:13.422Z
Link: CVE-2024-0354
JSON object: View
NVD Information
Status : Modified
Published: 2024-01-10T00:15:45.950
Modified: 2024-05-17T02:34:33.227
Link: CVE-2024-0354
JSON object: View
Redhat Information
No data.