Unrated severityNVD Advisory· Published Mar 14, 2022· Updated Mar 11, 2025
File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010
CVE-2022-24387
Description
With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010
Affected products
2= v100.0.8019.14010+ 1 more
- (no CPE)range: = v100.0.8019.14010
- (no CPE)range: 100.0.8019.x
Patches
Vulnerability mechanics
References
2- csirt.divd.nl/CVE-2022-24387/mitrex_refsource_CONFIRMthird-party-advisory
- csirt.divd.nl/DIVD-2021-00029mitrex_refsource_CONFIRMrelated
News mentions
0No linked articles in our index yet.