Approved changes feed: RSS · Atom
cpe:2.3:a:vaultize:drm:21.07.27:*:*:*:*:*:*:*part: a version: 21.07.27 update: *
| Vendor | Vaultize (7e2ddd46-b0d0-55c9-a207-e7cc54358ebb) |
|---|---|
| Product | Drm (6f7e545c-9536-5830-bfe4-f2ee1dfbbafd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-36079 |
vulnerable | 2026-06-08 06:39:43.628822 |
Details available
An issue was discovered in Vaultize 21.07.27. When uploading files, there is no check that the filename parameter is correct. As a result, a temporary file will be created outside the specified directory when the file is downloaded. To exploit this, an authenticated user would upload a file with an incorrect file name, and then download it.
Published: 2024-05-24T21:47:05.948Z
Updated: 2025-02-13T15:59:17.166Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.