Skip to content
OpenAdvisories

Vendor

perspective-dev

5 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • High 7.5

    Perspective 5.0.0 Path Traversal via cwd_static_file_handler

    Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-…

  • High 7.5

    Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

    Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed…

  • High 8.8

    Perspective 5.0.0 RCE via eval() Expression Injection

    Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied inp…