CVE-2024-10933 - CERT CVE
ID CVE-2024-10933
Sažetak In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.
Reference
CVSS
Base: 5.0
Impact: 3.6
Exploitability:1.3
Pristup
VektorSloženostAutentikacija
LOCAL LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH NONE NONE
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Zadnje važnije ažuriranje 05-12-2024 - 20:15
Objavljeno 05-12-2024 - 20:15