CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-863 - Incorrect Authorization
Log in or create an account to your .
Seen : The vulnerability was mentioned, discussed, or observed by the user.
Confirmed : The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept : A public proof of concept is available for this vulnerability.
Exploited : The vulnerability was observed as exploited by the user who reported the sighting.
Patched : The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited : The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed : The user expressed doubt the validity of the vulnerability.
Not patched : The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
