What the vulnerability does
01Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in helloprint Helloprint helloprint allows Path Traversal.This issue affects Helloprint: from n/a through <= 2.0.7.
Explanation of Vulnerability in Simple Terms
02Summary
Helloprint versions up to 2.0.7 contain a path traversal vulnerability that allows an authenticated attacker to cause a denial of service by disrupting the application's availability. The vulnerability requires low-level authentication and network access, but does not allow reading or modifying sensitive data. Sites running affected versions should update immediately.
What an attacker can do
03Attacker Capabilities
Disrupt the application's availability through a path traversal attack.
Potential impact on your site
04Site Impact
Your site may become unavailable or unresponsive if an authenticated user exploits this vulnerability.
Conditions required to exploit
05Prerequisites
Attacker must have low-level authentication credentials and network access to the application.
Key dates
06Disclosure timeline
March 3, 2025
CVE published
April 28, 2026
Record updated