Lvt-Tholv2K
·
Published
2025-04-01
·
Updated
2025-04-01
·
CVE-2025-30878
8.6
High
| Base vector | Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
JoomSky JS Help Desk versions n/a through 2.9.2
Description:
The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows unauthorized access.
Recommendations:
For versions n/a through 2.9.2, update to a version that includes the fix for this issue to prevent Path Traversal attacks.
As a temporary workaround, consider restricting access to sensitive directories to minimize the risk of exploitation.
Fix
Path traversal