CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Category Icon versions up to 1.0.1 contain a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server. An attacker with high-level privileges can access sensitive files outside the intended directory structure. The vulnerability requires administrator access and does not affect file integrity or availability.
What an attacker can do
Read arbitrary files from the server filesystem.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can access sensitive files like configuration files or database backups.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
