[CVE-2026-85964] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authe…

Descripción técnica

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.

Puntuación CVSS

Score: 7.7/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Debilidades (CWE)

CWE-22

Fuente oficial

Publicado en NIST NVD.