Ifair vulnerabilities

2 known vulnerabilities in Ifair from Fuwushe. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Ifair: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-22523Jan 30, 2024FuwusheEPSS 1.09%

  Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive information via uploadimage component.

• 7.5 High severity

  Ifair: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-47473Jan 3, 2024Fuwushe

  Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.