CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2024-57170
Severity
MEDIUM
CVSS
6.5
EPSS
0.86%
Original NVD Description
SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences (e.g., ../). This vulnerability enables attackers to delete arbitrary files outside the intended upload directory, potentially leading to denial of service or disruption of application functionality.
Related CVEs
Other vulnerabilities affecting the same vendor(s)