Path traversal in FreeTAKServer-UI

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-25511 · ADVISORY
• FreeTAKTeam/UI · WEB
• FreeTAKTeam/UI · PACKAGE
• pypi.org/project/freetakserver-ui · PACKAGE
• GitHub Advisory GHSA-7cr9-rmqr-fpqp · ADVISORY

freetakserver-ui의 다른 취약점

• CVE-2022-25512높음 7.5FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.
• CVE-2022-25507보통 5.4FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.
• CVE-2022-25506보통 6.5FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.