CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Instant VA instantva allows Path Traversal.This issue affects Instant VA: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Instant VA versions 1.0.1 and earlier contain a path traversal vulnerability that allows an authenticated attacker to cause a denial of service by disrupting the application's availability. The vulnerability requires low-level authentication and network access but does not compromise data confidentiality or integrity. The impact extends beyond the vulnerable component itself.
What an attacker can do
Disrupt the application's availability through a path traversal attack.
Potential impact on your site
Authenticated users with low privileges can crash or disable the Instant VA application.
Conditions required to exploit
Attacker must have low-level authentication credentials and network access to the application.
Key dates
External resources
Related vulnerabilities
