PT-2023-12401 · Unknown+1 · Trampgeek Jobe+1

Jobe + 1 · Publicado 2022-08-26 · Atualizado 2025-05-28 · CVE-2021-4297

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions trampgeek jobe versions 1.6.4 and earlier

Description A vulnerability has been found in the function runs post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness.

Recommendations For versions 1.6.4 and earlier, upgrade to version 1.6.5 to address this issue. As a temporary workaround, consider restricting the manipulation of the sourcefilename argument in the runs post function until the upgrade is applied.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

ALT-PU-2022-2503

ALT-PU-2022-2554

CVE-2021-4297

Produtos afetados

Alt Linux

Trampgeek Jobe

Referências · 9

• https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771 · Correção
• https://github.com/trampgeek/jobe/issues/46 · Correção
• https://vuldb.com/?id.217174 · Nota
• https://t.me/cvenotify/123847 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-4297 · Aviso do Fabricante
• https://t.me/cibsecurity/55730 · Publicação no Telegram
• https://t.me/cvenotify/41607 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-4297 · Nota de Segurança
• https://vuldb.com/?ctiid.217174 · Nota