CVE-2022-25773 — Relative Path Traversal in assets file upload

CVE-2022-25773

Relative Path Traversal in assets file upload PUBLISHED

Description (CNA)

This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.

Affected (CNA)

Vendor / product	Versions
Mautic / mautic/core	affected < 5.2.3

CWE

CWE-22

References

https://github.com/mautic/mautic/security/advisories/GHSA-4w2w-36vm-c8hf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.