Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Rmountjoy92

#27955of 53,624
9.1Total CVSS
Vulnerabilities · 1
PT-2023-32809
9.1
2023-12-17
Rmountjoy92 · Dashmachine · CVE-2023-6900
**Name of the Vulnerable Software and Affected Versions** rmountjoy92 DashMachine versions 0.5 through 4 **Description** A critical issue has been found in the software, affecting some unknown functionality of the file /settings/delete file. The manipulation of the argument `file` leads to path traversal, allowing access to files outside the intended directory, such as '../filedir'. The issue has been publicly disclosed and may be exploited. **Recommendations** For versions 0.5 through 4, consider restricting access to the /settings/delete file functionality until a patch is available. As a temporary workaround, avoid using the `file` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.