GHSA-qf2g-86hc-xp38
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: June 13, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.