CVE-2025-57403: Cola Dnslog: güvenlik açığı

Açıklama (NVD)

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL (or a portion of it) directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to the potential exposure of sensitive information.

Özet bilgiler

Ürün

Abelche Cola Dnslog

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

%1,05 (yüzdelik 64)

CWE

CWE-23

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• gist.github.com
• github.com
• CWE-23