Paisa
Monthly
Unauthenticated path traversal in Paisa before v0.7.8 lets remote attackers read arbitrary server-readable files and delete backup files by supplying '../' sequences in the file name accepted by the editor file handlers (GetFile, GetSheet) and the delete_backups handlers (DeleteBackups, DeleteSheetBackups). The flaw is rated CVSS 4.0 8.8 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L) and the vendor has released a fix in v0.7.8, so any default deployment reachable over the network is exposed until upgraded; no public exploit code was identified at time of analysis, and practical risk is bounded mainly by whether the instance is bound beyond localhost. Confidentiality impact is high because reads are limited only by the permissions of the server process account, while integrity impact is low and confined to removal of .backup.* files.
Unauthenticated path traversal in Paisa before v0.7.8 lets remote attackers read arbitrary server-readable files and delete backup files by supplying '../' sequences in the file name accepted by the editor file handlers (GetFile, GetSheet) and the delete_backups handlers (DeleteBackups, DeleteSheetBackups). The flaw is rated CVSS 4.0 8.8 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L) and the vendor has released a fix in v0.7.8, so any default deployment reachable over the network is exposed until upgraded; no public exploit code was identified at time of analysis, and practical risk is bounded mainly by whether the instance is bound beyond localhost. Confidentiality impact is high because reads are limited only by the permissions of the server process account, while integrity impact is low and confined to removal of .backup.* files.