FNT Command Directory Traversal Vulnerability

A directory traversal vulnerability has been identified in FNT Command version 13.4.0. This issue allows authenticated attackers to upload files to arbitrary locations on the server by exploiting inadequate validation of user-supplied file paths during the file upload process. Depending on the server's deployment and configuration, this vulnerability could lead to a full system compromise, such as by uploading executable files or overwriting critical security resources.

Impact

Exploitation of this vulnerability could allow an authenticated user to upload files outside the designated upload directory, potentially accessing sensitive server files or executing malicious code, depending on the uploaded file type.

Remediation

Users are advised to update to FNT Command version 13.4.1 or later, where this vulnerability has been fixed.