CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects WebinarIgnition: from n/a through < 4.08.253.
Explanation of Vulnerability in Simple Terms
WebinarIgnition versions up to 4.08.253 contain a path traversal vulnerability that allows an authenticated attacker to read, modify, or delete arbitrary files on the server. The vulnerability requires low-level user privileges and network access, but no user interaction. Impact extends beyond the vulnerable component, potentially compromising the entire site.
What an attacker can do
Read, modify, or delete arbitrary files on the server.
Potential impact on your site
An authenticated user can access sensitive files, alter site configuration, or disable the site entirely.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
