CVE-2018-17934

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.

NUUO CMS, en todas las versiones 3.3 y anteriores, la aplicación permite que las entradas externas construyan un nombre de ruta que puede ser resuelto fuera del directorio planeado. Esto podría permitir que un atacante suplante a un usuario legítimo, obtenga información restringida o ejecute código arbitrario.