A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Fortra
Published: 2024-03-13T14:10:36.029Z
Updated: 2024-03-13T14:10:36.029Z
Reserved: 2024-02-06T21:23:57.924Z
Link: CVE-2024-25153
JSON object: View
NVD Information
Status : Awaiting Analysis
Published: 2024-03-13T15:15:50.913
Modified: 2024-03-13T18:16:18.563
Link: CVE-2024-25153
JSON object: View
Redhat Information
No data.
CWE