Threats tagged 'ghsa-vhv2-j368-w4wv'

Eleveo Quality Management version 9.7.0 contains a path traversal vulnerability in the Scorecard.jsp file within the Questionnaire Audio Upload component. This vulnerability allows remote attackers with low privileges to manipulate file paths, potentially leading to unauthorized file access or modification. The issue has a medium severity with a CVSS score of 6.3. No patch or remediation guidance is currently available, and the vendor has not responded to notifications. Although public exploit details exist, there have been no reports of exploitation in the wild.