high7.5
CVE-2023-24698
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying…
Impact
Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foswiki | Foswiki | from 2.0.0 through 2.1.7 |