| Package | Affected versions | Patched versions |
|---|---|---|
| firewall community | ≤ 3.3.25 |
Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences, which is then passed to an unlink() call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free