CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Path Traversal.This issue affects UPC/EAN/GTIN Code Generator: from n/a through <= 2.0.2.
Explanation of Vulnerability in Simple Terms
The UPC/EAN/GTIN Code Generator through version 2.0.2 contains a path traversal vulnerability that allows an authenticated attacker to cause a denial of service by disrupting the application's availability. The vulnerability requires low-level authentication and network access but does not compromise data confidentiality or integrity. Administrators should update to a version newer than 2.0.2 when available.
What an attacker can do
Disrupt the application's availability through a path traversal attack.
Potential impact on your site
Site availability may be disrupted if an authenticated user exploits this path traversal flaw.
Conditions required to exploit
Attacker must have low-level authentication credentials and network access to the application.
Key dates
External resources
