Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-2692

CoCoTeaNet CyreneAdmin Image getAvatar path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in CoCoTeaNet CyreneAdmin up to 1.3.0. This affects an unknown part of the file /api/system/user/getAvatar of the component Image Handler. Performing a manipulation of the argument Avatar results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CoCoTeaNet CyreneAdmin

  • 1.0affected
  • 1.1affected
  • 1.2affected
  • 1.3.0affected

References