Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-6026 EUVD-2023-2930GHSA-8qfm-h8rh-h3r7

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in PHPMemcachedAdmin

Published Nov 30, 2023 · Updated Aug 2, 2024 · Assigned by INCIBE

Description

A Path traversal vulnerability has been reported in elijaa/phpmemcachedadmin affecting version 1.3.0. This vulnerability allows an attacker to delete files stored on the server due to lack of proper verification of user-supplied input.

Affected products

VendorProductAffectedFixed
PHPMemcachedAdmin PHPMemcachedAdmin 1.3.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist elijaa/phpmemcacheadmin <= 1.3.0 — GHSA-8qfm-h8rh-h3r7

References