TI-2024-10481 CVE-2024-11315 · GHSA-pr37-gvg2-qr9v
TRCore DVC - Arbitrary File Upload through Path Traversal
Priority MEDIUM 52
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files.
TRCore
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
TRCore records in CISA KEVNo TRCore vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Dvc · all components
TI-2024-10480 CVE-2024-11314 · GHSA-gx4q-m69p-mf52
TRCore DVC - Arbitrary File Upload through Path Traversal
Priority MEDIUM 52
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files.
TI-2024-10479 CVE-2024-11313 · GHSA-gwm3-gp4w-96g7
TRCore DVC - Arbitrary File Upload through Path Traversal
Priority MEDIUM 52
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files.
TI-2024-10478 CVE-2024-11312 · GHSA-gwhh-pw54-jgx4
TRCore DVC - Arbitrary File Upload through Path Traversal
Priority MEDIUM 52
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files.
TI-2024-10477 CVE-2024-11311 · GHSA-qj3w-6895-r5mf
TRCore DVC - Arbitrary File Upload through Path Traversal
Priority MEDIUM 52
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files.
TI-2024-10476 CVE-2024-11310 · GHSA-hjr8-c78p-hrvc
TRCore DVC - Arbitrary File Read through Path Traversal
Priority MEDIUM 40
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
TI-2024-10475 CVE-2024-11309 · GHSA-48rr-fh2m-hhjh
TRCore DVC - Arbitrary File Read through Path Traversal
Priority MEDIUM 40
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
TI-2024-10474 CVE-2024-11308 · GHSA-w9wj-2hjp-gx85
TRCore DVC - Use of Hard-coded Cryptographic Key
Priority LOW 27
The DVC from TRCore encrypts files using a hardcoded key.