GHSA-5jpg-2rj5-964c
lsFusion Platform has a Path Traversal vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | lsfusion.platform:web-client | <= 6.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
References
External links from the advisory. They lead to third-party sites.