GHSA-rrhw-54r8-545qMediumCVSS 5.4

Path Traversal in FileGator

Published
May 25, 2022
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-1850 →

📋 Description

Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with ..\ as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files.

🎯 Affected products1

  • composer/filegator/filegator:< 7.8.0

🔗 References (4)