This affects the package... CVE-2022-25299

5.0 AV AC AU C I A
发布： 2022-02-18
修订： 2024-11-21

This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息