A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the file index.php. The manipulation of the argument f leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250121 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://note.zhaoj.in/share/nHD5xiHQgHG0 | Broken Link |
| https://vuldb.com/?ctiid.250121 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.250121 | Third Party Advisory |
Configurations
History
17 Jan 2024, 01:14
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| CPE | cpe:2.3:a:unknown-o:download-station:*:*:*:*:*:*:*:* | |
| References | () https://note.zhaoj.in/share/nHD5xiHQgHG0 - Broken Link | |
| References | () https://vuldb.com/?ctiid.250121 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.250121 - Third Party Advisory | |
| First Time |
Unknown-o
Unknown-o download-station |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
10 Jan 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-10 00:15
Updated : 2024-05-17 02:34
NVD link : CVE-2024-0354
Mitre link : CVE-2024-0354
CVE.ORG link : CVE-2024-0354
JSON object : View
Products Affected
unknown-o
- download-station