CVSS 8.1 · High EPSS 0,77%
Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada asustor data master. Skor CVSS 3.1 8.1 (High) menurut NVD.
The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings. A malicious server or MITM attacker can craft filenames containing path traversal sequences, causing the client to write files outside the intended backup directory. A path traversal vulnerability may allow an attacker to overwrite arbitrary files on the system and potentially achieve privilege escalation or remote code execution. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| asustor | data master | Versi 4.1.0.rhu2 hingga 4.3.3.rof1 |
| asustor | data master | Versi 5.0.0.ra82 hingga sebelum 5.1.2.reo1 |