💣Exploit CVE-2024-55602 - PwnDoc Path Traversal Vulnerability (Arbitrary File Read)

[Maksim]

CVE ID : CVE-2024-55602
Published : Dec. 10, 2024, 5:15 p.m. | 42 minutes ago
Description : PwnDoc is a penetration test report generator. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an authenticated user who is able to update and download templates can inject path traversal (`../`) sequences into the file extension property to read arbitrary files on the system. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 contains a patch for the issue.
Severity: 7.6 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.