Threats tagged 'ghsa-j4h3-fqpx-mh28'

1 threat

Threats tagged 'ghsa-j4h3-fqpx-mh28'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.0	EPSS 0.5%	CVE-2026-114399trudesk · Path Traversal High7.0EPSS 0.5%2026-10-21CVE Database V5CVE-2026-114399 Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded traversal sequences to DELETE /api/v1/backup/:backup. Attackers can also pass unvalidated file values to POST /api/v1/backup/restore to restore archives from, or extract to, paths outside the intended directories. EPSS 0.5%Vulnerability polonel #ghsa-j4h3-fqpx-mh28	CVE Database V5	2026-10-21

Showing 1–1 of 1 result