GitHub Advisoryadvisory · NuGet

GHSA-w327-wq28-3vmf CuteSoft CuteEditor Path Traversal vulnerability

MEDIUM Published 2022-05-02 Modified 2024-02-08 Official page ↗
Aliases
CVE-2009-4665
Ecosystem
NuGet
Packages
CuteEditor
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2024-02-08

Affected packages

• NuGet CuteEditor: < 6.6 → fixed in 6.6

Description

Directory traversal vulnerability in `CuteSoft_Client/CuteEditor/Load.ashx` in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a `..` (dot dot) in the file parameter.

Related

Alias · CVE (1)

  • CVE-2009-4665 Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References