Vulnerabilities (CVE)

Filtered by vendor Agevolt Subscribe
Filtered by product Agevolt
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-38485 1 Agevolt 1 Agevolt 2024-11-21 N/A 6.5 MEDIUM
A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure. A remote authenticated attacker could leverage this vulnerability to read files from any location on the target operating system with web server privileges.
CVE-2022-38484 1 Agevolt 1 Agevolt 2024-11-21 N/A 8.8 HIGH
An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with web server privileges.