Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Kphrx

#47730de 53,632
5.3CVSS total
Vulnerabilidades · 1
PT-2023-32198
5.3
2023-10-15
Unknown · Kphrx Pleroma · CVE-2023-5588
**Name of the Vulnerable Software and Affected Versions** kphrx pleroma (affected versions not specified) **Description** A vulnerability was found in kphrx pleroma, classified as problematic. It affects the function `Pleroma.Emoji.Pack` of the file `lib/pleroma/emoji/pack.ex`. The manipulation of the argument `name` leads to path traversal. The complexity of an attack is rather high, and the exploitability is told to be difficult. **Recommendations** To fix this issue, it is recommended to apply the patch named 2c795094535537a8607cc0d3b7f076a609636f40. As a temporary workaround, consider restricting access to the `Pleroma.Emoji.Pack` function until the patch is applied.