CVE-2026-108120
2026-10-19
06h17 +00:00
06h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of
koozali's SME Server version 11.0rc1-215 allowing an unauthenticated
attacker to access files outside of the intended directory, leading to
exfiltration of files located outside the intended system logs
directory, including potentially sensitive system and application files.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Path Traversal: 'dir\..\..\filename' The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize 'dir\..\..\filename' (multiple internal backslash dot dot) sequences that can resolve to a location that is outside of that directory. |
