albadotpy/ovidentia-information-disclosure-on-upload-directory-content

albadotpy/ovidentia-information-disclosure-on-upload-directory-content

GitLabGitLab
GitLabgitlab.com
Releases0
Incorrect Access Control in FileManager in Ovidentia CMS 6.0 allows remote unauthenticated users to view and download content (information disclosure) in the upload directory via path traversal. Tested on version 6.0, this version is vulnerable.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-22914↗
7.5 HIGH5 MEDIUM

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal.