Description (CNA)
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.wangxutech.com
- https://github.com/harry0703/MoneyPrinterTurbo
- https://moneyprinterturbo.net
- https://gist.github.com/Theresasu1/3a9ced1f3d8208cc9f99ce34057cf681
ADP enrichment
No English description supplied.
No references supplied.