Skip to content
OpenAdvisories

Vendor

flextype

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.3

    Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

    Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and new_id parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests…