Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Witcher

#41271de 53,622
6.5CVSS total
Vulnerabilidades · 1
PT-2023-30464
6.5
2023-09-04
Yonyou · Yongyou Ufida-Nc · CVE-2023-4748
**Name of the Vulnerable Software and Affected Versions** Yongyou UFIDA-NC versions up to 20230807 **Description** A critical issue has been found in the processing of the file PrintTemplateFileServlet.java, where the manipulation of the `filePath` argument leads to path traversal. This issue can be initiated remotely. **Recommendations** For versions up to 20230807, as a temporary workaround, consider restricting access to the PrintTemplateFileServlet.java file to minimize the risk of exploitation. Avoid using the `filePath` argument in the affected processing until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.