Security Advisory

CVE-2024-2564

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-03-17 14:00:06

Last updated 2024-08-22 19:12:14

Assigner VulDB

CVSS score 6.3

State PUBLISHED

Description

A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257063.

← Browse all CVEs View on cve.org ↗