Beveiligingsadvies

CVE-2018-25421

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-30 14:55:25

Laatst bijgewerkt 2026-07-15 01:23:41

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files.

← Alle CVE's bekijken Bekijk op cve.org ↗