Security Advisory

CVE-2015-4425

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-08-18 17:00:00

Last updated 2024-08-06 06:11:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir parameter to admin/asset/add-asset-compatibility.

← Browse all CVEs View on cve.org ↗