CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CodeFlock FREE DOWNLOAD MANAGER free-download-manager allows Path Traversal.This issue affects FREE DOWNLOAD MANAGER: from n/a through <= 1.0.0.
Explanation of Vulnerability in Simple Terms
Free Download Manager versions 1.0.0 and earlier contain a path traversal vulnerability that allows an attacker to cause a denial of service by disrupting the application's availability. The vulnerability requires no authentication or user interaction and can be exploited over the network. An update to a version newer than 1.0.0 is required to resolve this issue.
What an attacker can do
Disrupt the application's availability by exploiting a path traversal flaw.
Potential impact on your site
The application may become unavailable or unresponsive due to denial of service attacks.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
