CVE-2024-25975 — Arbitrary File Overwrite
The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file ca…
Published: 2024-05-29 · CVSS: 6.5 · CVSS 3.1
The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten. The file can be controlled by an authenticated attacker, the content cannot be controlled. It is possible to overwrite all files for which the webserver has write access. It is required to supply a relative path (path traversal).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7