Skip to content
OpenAdvisories

Product · coderaiser

cloudcmd

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack

    Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validati…