CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT Luxa Addons: from n/a through <= 1.2.2.
Explanation of Vulnerability in Simple Terms
PT Luxa Addons versions 1.2.2 and earlier contain a path traversal vulnerability that allows authenticated users to cause a denial of service by disrupting site availability. An attacker with low-level access can exploit this flaw through the network without user interaction. The vulnerability affects the broader system scope, potentially impacting multiple components or services.
What an attacker can do
Disrupt site availability and cause denial of service through path traversal exploitation.
Potential impact on your site
Site availability may be disrupted; authenticated users with low privileges can trigger denial of service.
Conditions required to exploit
Attacker must have low-level authenticated access to the site; no user interaction required.
Key dates
External resources
