Microsoft Defender for Endpoint for Linux Spoofing Vulnerability
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
Link | Tags |
---|---|
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43614 | patch vendor advisory |