~ / search / GHSA-ph62-8768-r87v

GHSA-ph62-8768-r87v

Arbitrary file delete in ectouch/ectouch

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-25098

Packages

EcosystemPackageAffectedFixed in
Packagist ectouch/ectouch <= 2.7.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.

References

External links from the advisory. They lead to third-party sites.