A CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite arbitrary files via crafted HTTP requests.
CVSS
No CVSS.
References
Configurations
No configuration.
History
12 Feb 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-12 14:15
Updated : 2025-02-12 14:15
NVD link : CVE-2025-26349
Mitre link : CVE-2025-26349
JSON object : View
Products Affected
No product.
CWE
CWE-23
Relative Path Traversal