DVC vulnerabilities
7 known vulnerabilities in DVC from TRCore. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 7.5 High severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
- 7.5 High severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.