← volver
CVE-2025-13262

lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal

CVSS 6.9 MEDIUMEPSS 0.5%CWE-22
A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
lsfusion · platform

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →