Vulnerabilities (CVE)

Filtered by vendor Smartstore Subscribe
Filtered by product Smartstorenet
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-36364 1 Smartstore 1 Smartstorenet 2021-05-25 6.4 MEDIUM 9.1 CRITICAL
An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy and delete actions) in the ImportController.Create method via a TempFileName field.