high8.1
CVE-2022-1850
Path Traversal in FileGator
Impact
Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with `..\` as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | filegator/filegator | < 7.8.0 | 7.8.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Filegator | Filegator | before 7.8.0 |