Iris
1 CVEs
product
Monthly
DFIR-IRIS incident response platform before 2.4.24 allows authenticated users to delete arbitrary filesystem paths through mass assignment of the file_local_name field combined with path trust in the delete operation. Scope change with high integrity/availability impact. Patch available.
Information Disclosure
Iris
NVD
GitHub
CVSS 3.1
9.6
EPSS
0.1%
EPSS 0%
CVSS 9.6
CRITICAL
PATCH
Act Now
DFIR-IRIS incident response platform before 2.4.24 allows authenticated users to delete arbitrary filesystem paths through mass assignment of the file_local_name field combined with path trust in the delete operation. Scope change with high integrity/availability impact. Patch available.
Information Disclosure
Iris
NVD
GitHub