MEDIUM
elecV2 elecV2P Wildcard log path.join path traversal
Published Mar 28, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.63%
Description
A vulnerability was found in elecV2 elecV2P up to 3.8.3. The affected element is the function path.join of the file /log/ of the component Wildcard Handler. The manipulation results in path traversal. The attack may be performed from remote. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
-
- Version 3.8.0StatusaffectedConstraints-
- Version 3.8.1StatusaffectedConstraints-
- Version 3.8.2StatusaffectedConstraints-
- Version 3.8.3StatusaffectedConstraints-
- Version
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://github.com/elecV2/elecV2P/ product
- https://github.com/elecV2/elecV2P/issues/200 exploitissue-tracking
- https://vuldb.com/submit/779178 third-party-advisory
- https://vuldb.com/vuln/353899 vdb-entrytechnical-description
- https://vuldb.com/vuln/353899/cti signaturepermissions-required
| Link | Providers | Tags |
|---|---|---|
| https://github.com/elecV2/elecV2P/ | product | |
| https://github.com/elecV2/elecV2P/issues/200 | exploitissue-tracking | |
| https://vuldb.com/submit/779178 | third-party-advisory | |
| https://vuldb.com/vuln/353899 | vdb-entrytechnical-description | |
| https://vuldb.com/vuln/353899/cti | signaturepermissions-required |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Mar 28, 2026
Updated Mar 30, 2026
Reserved Mar 27, 2026
Link CVE-2026-5014
CISA Vulnrichment
Updated Mar 30, 2026