Skip to content
OpenAdvisories
Unscored CVE-2021-37130 EUVD-2021-23706GHSA-5f94-pgvg-m2ff

There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses external input to con…

Published Oct 27, 2021 · Updated Aug 4, 2024 · Assigned by huawei

Description

There is a path traversal vulnerability in Huawei FusionCube 6.0.2.The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename.

Affected products

VendorProductAffectedFixed
— FusionCube 6.0.2 —

References