Mat2 vulnerabilities

2 known vulnerabilities in Mat2 from 0xacab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Compact DAB Transmitter: Missing Authentication for Critical Functionality

  CVE-2024-1491Apr 18, 2024Electrolink

  The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flash

• 7.5 High severity

  Mat2: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-35410Jul 8, 20220xacabEPSS 2.27%

  mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.