CVE-2022-0855
04.03.2022, 19:15
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microweber | whmcs | 𝑥 < 0.0.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-41 - Improper Resolution of Path EquivalenceThe system or application is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.
- CWE-706 - Use of Incorrectly-Resolved Name or ReferenceThe software uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
References