CVE-2022-25098

Description

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.

Affected Platforms

Weakness Type

NVD-CWE-noinfo

References

• https://github.com/dota-st/Vulnerability/blob/master/ECTouchV2.md
• https://github.com/dota-st/Vulnerability/blob/master/ECTouchV2.md