ZDI-CAN-19919: ZDI-23-1198: (0Day) LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability
Published Aug 24, 2023
·Updated
This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
LG Simple Editor
Event History
Aug 24, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
May 3, 2024
Advisory Published
via ZDI·02:23 AM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-19919?
The severity of ZDI-CAN-19919 is critical, as it allows remote attackers to delete arbitrary files.
2
How do I fix ZDI-CAN-19919?
To fix ZDI-CAN-19919, you should update LG Simple Editor to the latest version provided by LG.
3
Who can exploit ZDI-CAN-19919?
ZDI-CAN-19919 can be exploited by remote attackers without requiring authentication.
4
What type of vulnerability is ZDI-CAN-19919?
ZDI-CAN-19919 is a remote file deletion vulnerability that affects LG Simple Editor.
5
What are the potential impacts of ZDI-CAN-19919?
The potential impacts of ZDI-CAN-19919 include unauthorized deletion of sensitive files and disruption of services.