In breve
- CVE-2025-13262 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda lsfusion.platform:web-client, lsfusion platform (lsfusion).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.64%, superiore al 50.5% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
NVD description
A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Altre vulnerabilità di lsfusion.platform:web-client
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free