Security Advisory

CVE-2008-4129

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-09-18 20:00:00

Last updated 2024-08-07 10:08:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality.

← Browse all CVEs View on cve.org ↗