Yüksek CVSS 8.7
CVE-2026-15724: Sharefile Storage Zones Controller: hatalı girdi doğrulama
Açıklama (NVD)
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Özet bilgiler
- Ürün
- Progress Sharefile Storage Zones Controller
- CVSS v3.1
- 8.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N - EPSS
- %0,52 (yüzdelik 45)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| progress-sharefile-storage-zones-controller | — | — | 5.12.6 |
| progress-sharefile-storage-zones-controller | 6.0 | — | 6.0.3 |