CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex Market yml-for-yandex-market allows Path Traversal.This issue affects YML for Yandex Market: from n/a through < 5.3.0.
Explanation of Vulnerability in Simple Terms
YML for Yandex Market versions before 5.3.0 contain a path traversal vulnerability that allows an authenticated administrator to cause a denial of service by disrupting site availability. The vulnerability requires high-level privileges and does not affect data confidentiality or integrity. Scope is changed, meaning the impact may extend beyond the vulnerable component itself.
What an attacker can do
An authenticated admin can disrupt site availability through path traversal manipulation.
Potential impact on your site
Site availability can be disrupted by a malicious admin account; data confidentiality and integrity are not at risk.
Conditions required to exploit
Attacker must have administrator-level access; no user interaction required.
Key dates
External resources
Related vulnerabilities
