← CVE Intelligence

CVE-2021-26629

tobesoft XPLATFORM Path Traversal Vulnerability PUBLISHED

Description (CNA)

A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’.

Affected (CNA)

Vendor / productVersions
tobesoft Co.,Ltd / XPLATFORMaffected unspecified through 9.2.2.280

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.