Orta CVSS 4.3
CVE-2026-8662: Insightconnect Compression: dizin geçişi
Açıklama (NVD)
Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.
Özet bilgiler
- Ürün
- Rapid7 Insightconnect Compression
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - EPSS
- %0,30 (yüzdelik 22)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| rapid7-insightconnect-compression | — | — | 2.0.3 |