CVE-2024-2825 | lakernote EasyAdmin up to 20240315 saveReportFile file path traversal (I98ZTA)

A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipulation of the argument file leads to path traversal: ‘../filedir’.

This vulnerability is uniquely identified as CVE-2024-2825. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.