Compare commits

...
1 Commits
Author SHA1 Message Date
Prince Chaddha fecd046407 Fix CVE-2025-44177 template structure
- Fix template ID to match CVE format (protop-dir-traversal -> CVE-2025-44177)
- Add impact section describing potential consequences
- Fix tag formatting and remove spaces
- Fix vendor/product metadata to use lowercase format
- Add cve2025 tag for proper categorization
2025-07-29 15:37:50 -05:00
+6 -4
View File
@@ -1,4 +1,4 @@
id: protop-dir-traversal
id: CVE-2025-44177
info:
name: White Star Software ProTop - Directory Traversal
@@ -6,6 +6,8 @@ info:
severity: high
description: |
This vulnerability allows unauthenticated directory traversal via the pt3upd endpoint.
impact: |
An attacker can exploit this vulnerability to read sensitive files from the server file system, potentially exposing configuration files, credentials, and other sensitive information.
remediation: |
Upgrade White Star Software ProTop to a version after v4.4.2-2024-11-27.
reference:
@@ -22,9 +24,9 @@ info:
metadata:
verified: true
max-request: 1
vendor: White Star Software
product: Protop
tags: cve, lfi, traversal, protop
vendor: wss
product: protop
tags: cve,cve2025,lfi,traversal,protop
http:
- raw: