Description (CNA)
A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function downloadImpTemplet of the file /common/dep/common_dep.action.jsp. The manipulation of the argument filePath results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dibo / Data Decision Making System | affected 2.0; affected 2.1; affected 2.2; affected 2.3; affected 2.4; affected 2.5; affected 2.6; affected 2.7.0 |
CWE
CWE-22
References
- https://vuldb.com/?id.325981
- https://vuldb.com/?ctiid.325981
- https://vuldb.com/?submit.658242
- https://github.com/FightingLzn9/vul/blob/main/%E8%BF%AA%E5%8D%9A%E6%95%B0%E6%8D%AE%E5%86%B3%E7%AD%96%E7%B3%BB%E7%BB%9F.md
ADP enrichment
No English description supplied.
No references supplied.