CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RobMarsh Image Shadow image-shadow allows Path Traversal.This issue affects Image Shadow: from n/a through <= 1.1.0.
Explanation of Vulnerability in Simple Terms
Image Shadow versions 1.1.0 and earlier contain a path traversal vulnerability that allows authenticated users to cause a denial of service by disrupting site availability. An attacker with low-level access can craft requests that bypass directory restrictions and impact system resources across the affected application. No code execution or data theft is possible through this flaw.
What an attacker can do
Disrupt site availability by exploiting path traversal to access restricted directories and exhaust system resources.
Potential impact on your site
Site downtime or performance degradation if a low-privilege user exploits this vulnerability to consume server resources.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
