Directory traversal

2023-08-0815:15:00

PRIOn knowledge base

www.prio-n.com

insufficient parameter validation

foswiki::sandbox component

web request

nvd

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request.

CPENameOperatorVersion
foswikige2.0.0
foswikile2.1.7

CPE	Name	Operator	Version
	foswiki	ge	2.0.0
	foswiki	le	2.1.7

References

foswiki.org/Support/SecurityAlert-CVE-2023-24698