By changing the filename parameter in the request, an... · CVE-2023-29152 · GitHub Advisory Database · GitHub

By changing the filename parameter in the request, an...

High severity Unreviewed Published Jun 8, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

By changing the filename parameter in the request, an attacker could
delete any file with the permissions of the Vuforia server account.

References

Published by the National Vulnerability Database

Jun 7, 2023

Published to the GitHub Advisory Database Jun 8, 2023

Last updated Apr 4, 2024