Arbitrary File Deletion

2023-02-1215:47:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary file deletion

remote authenticated attacker

filesystem vulnerability

overwrite existing files

cve-2023-25152

github

pterodactyl wingso

EPSS

0.001

Percentile

43.3%

JSON

github.com/pterodactyl/wingso is vulnerable to Arbitrary File Deletion. A remote authenticated attacker is able to delete files and directories recursively on the host system via the vulnerable Delete function of filesystem.go. This vulnerability can further be exploited to overwrite existing files by combining it with CVE-2023-25152.