SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Langflow upload_user_file Path Traversal

Category: WEB-ATTACKS      

The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').


Relevant Information