CVE-2022-25297

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.

This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.

Esto afecta al paquete drogonframework/drogon versiones anteriores a 1.7.5. El manejo no seguro de los nombres de archivo durante la carga usando el método HttpFile::save() puede permitir a atacantes escribir archivos en ubicaciones arbitrarias fuera de la carpeta de destino designada