Description (CNA)
NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to bypass authorization and retrieve sensitive system files like /etc/shadow.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Netnumber / NetNumber Titan ENUM/DNS/NP | affected 7.9.1 |
CWE
CWE-22
References
- https://www.exploit-db.com/exploits/46811
- https://www.netnumber.com/products/#data
- https://www.vulncheck.com/advisories/netnumber-titan-master-path-traversal-via-drp
ADP enrichment
No English description supplied.
No references supplied.