CVE-2015-10030

A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability.
References
Link Resource
https://github.com/SUKOHI/Surpass/commit/d22337d453a2a14194cdb02bf12cdf9d9f827aa7 Patch Third Party Advisory
https://github.com/SUKOHI/Surpass/releases/tag/1.0.0 Release Notes Third Party Advisory
https://vuldb.com/?ctiid.217642 Permissions Required Third Party Advisory
https://vuldb.com/?id.217642 Permissions Required Third Party Advisory
https://github.com/SUKOHI/Surpass/commit/d22337d453a2a14194cdb02bf12cdf9d9f827aa7 Patch Third Party Advisory
https://github.com/SUKOHI/Surpass/releases/tag/1.0.0 Release Notes Third Party Advisory
https://vuldb.com/?ctiid.217642 Permissions Required Third Party Advisory
https://vuldb.com/?id.217642 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:surpass_project:surpass:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:24

Type Values Removed Values Added
CVSS v2 : 5.2
v3 : 5.3
v2 : 5.2
v3 : 5.5
References () https://github.com/SUKOHI/Surpass/commit/d22337d453a2a14194cdb02bf12cdf9d9f827aa7 - Patch, Third Party Advisory () https://github.com/SUKOHI/Surpass/commit/d22337d453a2a14194cdb02bf12cdf9d9f827aa7 - Patch, Third Party Advisory
References () https://github.com/SUKOHI/Surpass/releases/tag/1.0.0 - Release Notes, Third Party Advisory () https://github.com/SUKOHI/Surpass/releases/tag/1.0.0 - Release Notes, Third Party Advisory
References () https://vuldb.com/?ctiid.217642 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.217642 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.217642 - Permissions Required, Third Party Advisory () https://vuldb.com/?id.217642 - Permissions Required, Third Party Advisory

11 Apr 2024, 00:53

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en SUKOHI Surpass y se ha clasificado como crítica. Esta vulnerabilidad afecta a un código desconocido del archivo src/Sukohi/Surpass/Surpass.php. La manipulación del argumento dir conduce al recorrido del nombre de ruta. La actualización a la versión 1.0.0 puede solucionar este problema. El parche se identifica como d22337d453a2a14194cdb02bf12cdf9d9f827aa7. Se recomienda actualizar el componente afectado. VDB-217642 es el identificador asignado a esta vulnerabilidad.

20 Oct 2023, 08:15

Type Values Removed Values Added
Summary A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The name of the patch is d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability. A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability.

Information

Published : 2023-01-08 10:15

Updated : 2024-11-21 02:24


NVD link : CVE-2015-10030

Mitre link : CVE-2015-10030

CVE.ORG link : CVE-2015-10030


JSON object : View

Products Affected

surpass_project

  • surpass
CWE
CWE-21

DEPRECATED: Pathname Traversal and Equivalence Errors

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')