CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in machouinard Aviation Weather from NOAA aviation-weather-from-noaa allows Path Traversal.This issue affects Aviation Weather from NOAA: from n/a through <= 0.7.2.
Explanation of Vulnerability in Simple Terms
Aviation Weather from NOAA versions 0.7.2 and earlier contain a path traversal vulnerability that allows authenticated users to cause a denial of service by manipulating file paths. An attacker with low-level access can disrupt service availability. The vulnerability requires network access and valid credentials but no user interaction.
What an attacker can do
Disrupt the application's availability by traversing file paths to access or manipulate system resources.
Potential impact on your site
Authenticated users can crash or degrade the application, affecting availability for legitimate users.
Conditions required to exploit
Attacker must have low-level user credentials and network access to the application.
Key dates
External resources
