Vendor
3clyp50
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
Agent Zero < 1.15 Path Traversal File Read via image_get API
Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, which relies solely on an extension allowlist while the path co…