Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-s4kf-3vxr-zfep |
| Summary | Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
23 |
| name |
Relative Path Traversal |
| description |
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as .. that can resolve to a location that is outside of that directory. |
|
|
| Exploits |
|
| Severity_range_score | 8.8 - 8.8 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-s4kf-3vxr-zfep |