tbm-client vulnerabilities

2 known vulnerabilities in tbm-client from Chunghwa Telecom. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  tbm-client: Absolute Path Traversal

  CVE-2024-12644Dec 16, 2024Chunghwa Telecom

  The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote atta

• 8.1 High severity

  tbm-client: Absolute Path Traversal

  CVE-2024-12643Dec 16, 2024Chunghwa Telecom

  The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remo