Yüksek CVSS 7.7
CVE-2026-84294: CVE-2026-84294: dizin geçişi
Açıklama (NVD)
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.
Özet bilgiler
- CVSS v3.1
- 7.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - EPSS
- %0,35 (yüzdelik 29)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor