Description
The directory specifier can include designators that can be used to
traverse the directory path. Exploiting this vulnerability may enable an
attacker to access a limited number of hardcoded file types. Further
exploitation of this vulnerability may allow an attacker to cause the
web server component to enter a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cogent | DataHub | < 7.3.5 | 7.3.5 |
Advisories 1
- ICSA-14-149-02 Cogent DataHub Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025