Threats tagged 'ghsa-jm4m-752p-2g2x'

A critical path traversal vulnerability exists in the Comfast CF-WR632AX version 2.6.0.1 within the Multipart Parser component of the /usr/bin/webmgnt file. This vulnerability allows remote attackers to manipulate the filename argument to traverse directories. Exploit code is publicly available, and the vendor has not responded to disclosure attempts.