Description
Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files to arbitrary locations by modifying the "path" URL parameter. NOTE: the "filename" POST parameter is covered by CVE-2018-11345.
Unscored
CVE-2018-12309
EUVD-2018-4283GHSA-25cg-jjh4-7wh5
Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files to arbitrary locations by modifying the "pa…
Published Dec 4, 2018 · Updated Aug 5, 2024 · Assigned by mitre