CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in flexcubed PitchPrint pitchprint allows Path Traversal.This issue affects PitchPrint: from n/a through <= 11.1.2.
Explanation of Vulnerability in Simple Terms
PitchPrint versions up to 11.1.2 contain a path traversal vulnerability that allows an attacker to cause a denial of service by sending specially crafted requests. The vulnerability requires no authentication or user interaction. An attacker can repeatedly trigger the flaw to make the application unavailable.
What an attacker can do
Make the PitchPrint application unavailable by triggering a denial of service condition.
Potential impact on your site
Your PitchPrint service may become unresponsive or crash if an attacker exploits this vulnerability.
Conditions required to exploit
Network access to the PitchPrint application; no authentication required.
Key dates
External resources
Related vulnerabilities
