Description
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | ectouch/ectouch | <= 2.7.2 | — | GHSA-ph62-8768-r87v |
Critical · 9.1
CVE-2022-25098
EUVD-2022-1127GHSA-ph62-8768-r87v
Arbitrary file delete in ectouch/ectouch
Published Feb 23, 2022 · Updated Aug 3, 2024 · Assigned by mitre