CVE-2026-103511
2026-10-05
09h17 +00:00
09h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| External Control of File Name or Path The product allows user input to control or influence paths or file names that are used in filesystem operations. |
