CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.
Explanation of Vulnerability in Simple Terms
Contest Gallery versions 21.3.4 and earlier contain a path traversal vulnerability that allows authenticated users to cause a denial of service by accessing files outside the intended directory. The vulnerability requires low-level user privileges and network access, but no user interaction. The scope is changed, meaning the impact extends beyond the vulnerable component itself.
What an attacker can do
An authenticated user can access files outside the intended directory and cause the site to become unavailable.
Potential impact on your site
Site availability can be disrupted by authenticated users with low privileges exploiting path traversal.
Conditions required to exploit
Attacker must have a low-level user account on the site; no additional user interaction required.
Key dates
External resources
Related vulnerabilities
