A vulnerability, which was classified as critical, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. Such manipulation of the argument file_name leads to path traversal.
This vulnerability is documented as CVE-2022-3940. The attack requires being on the local network. Additionally, an exploit exists.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-3940 | lanyulei ferry apis/process/task.go file_name path traversal (EUVD-2022-43274)
A vulnerability, which was classified as critical, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. Such manipulation of the argument file_name leads to path traversal. This vulnerability is…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR