Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-26629

tobesoft XPLATFORM Path Traversal Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tobesoft Co.,Ltd XPLATFORM

  • unspecified to ≤ 9.2.2.280affected

References