← Volver al buscador de CVEs

CVE-2026-42028

novaGallery

Descripción

novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1.

CVSS 5.3EPSS 0.315%Riesgo 0.55
Ver fuente
Publicación
2026-05-08 17:16:31
Versiones afectadas
<2.1.1
Tipo
Package
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N