CVE-2017-20102 — Album Lock getImage path traversal

CVE-2017-20102

Album Lock getImage path traversal PUBLISHED

Description (CNA)

A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / product	Versions
unspecified / Album Lock	affected 4.0

CWE

CWE-22

References

https://www.vulnerability-lab.com/get_content.php?id=2033
https://vuldb.com/?id.97268

ADP enrichment

CVE

No English description supplied.

https://www.vulnerability-lab.com/get_content.php?id=2033
https://vuldb.com/?id.97268

CISA-ADP

No English description supplied.

No references supplied.