CVE-2022-25297 — Arbitrary File Write
This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files t…
Published: 2022-02-21 · CVSS: 7.5 · CVSS 3.1
This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7