https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:11:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335738 EUVD-2026-335738 https://cve.radiocsirt.org/vuln/euvd-2026-335738 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55474 <p>Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the route filename parameter into a private upload-directory path without sanitization, allowing an authenticated attacker to traverse outside the intended directory and read arbitrary files accessible to the web server process. This issue is fixed in version 8.5.0.</p> <p>Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the route filename parameter into a private upload-directory path without sanitization, allowing an authenticated attacker to traverse outside the intended directory and read arbitrary files accessible to the web server process. This issue is fixed in version 8.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55474 https://cve.radiocsirt.org/vuln/ghsa-c6f4-wj38-m3g3 <p><strong>Affected:</strong> Packagist: snipe/snipe-it</p> <p>### Impact The `displaySig` action in `ActionlogController` serves signature image files from a private upload directory. The filename parameter from the HTTP route is concatenated directly into a filesystem path with no sanitization, allowing an authenticated attacker to traverse outside the intended directory and read arbitrary files accessible to the web server process.</p> <p>Reported by https://github.com/securin-public</p> <p><strong>Affected:</strong> Packagist: snipe/snipe-it</p> <p>### Impact The `displaySig` action in `ActionlogController` serves signature image files from a private upload directory. The filename parameter from the HTTP route is concatenated directly into a filesystem path with no sanitization, allowing an authenticated attacker to traverse outside the intended directory and read arbitrary files accessible to the web server process.</p> <p>Reported by https://github.com/securin-public</p> https://cve.radiocsirt.org/vuln/ghsa-c6f4-wj38-m3g3 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2073 <p>Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2073