Description
A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| tobesoft | XPLATFORM | unspecified – ≤ 9.2.2.280 | — |