An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information.
References
Link | Resource |
---|---|
https://github.com/qinming99/dst-admin/issues/28 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2022-01-10 07:15
Updated : 2022-07-12 10:42
NVD link : CVE-2021-44586
Mitre link : CVE-2021-44586
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
dst-admin_project
- dst-admin