SmartEMS Web Application vulnerabilities
1 known vulnerability in SmartEMS Web Application from Welotec. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
SmartEMS Web Application: Improper Limitation of a Pathname to a Restricted Directory
The upload endpoint insufficiently validates the 'Upload-Key' request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurati