Vulnerabilidades de Novafacile
CVEs publicadas que afetam produtos de Novafacile: 1 registro(s), com severidade, exploração e correções.
CVE-2026-42028
Média · 5.3
CWE-22 08/05/2026
novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root
novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1.