CVE-2021-45015: Path Traversal
First published: Tue Dec 14 2021(Updated: )
taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| taogogo taoCMS | =3.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-45015?
CVE-2021-45015 is a vulnerability in taocms 3.0.2 that allows arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.
How severe is CVE-2021-45015?
CVE-2021-45015 has a severity rating of critical with a CVSS score of 9.1.
How does CVE-2021-45015 affect taocms 3.0.2?
CVE-2021-45015 affects taocms 3.0.2 by allowing arbitrary file deletion through the taocms\include\Model\file.php script.
Is there a fix for CVE-2021-45015?
Currently, there is no known fix for CVE-2021-45015. It is recommended to update to a patched version of taocms when available.
Where can I find more information about CVE-2021-45015?
More information about CVE-2021-45015 can be found at the following reference link: [GitHub Issue #12](https://github.com/taogogo/taocms/issues/12)
- collector/nvd-index
- vendor/taogogo
- canonical/taogogo taocms
- version/taogogo taocms/3.0.2