| Assigner | INCIBE |
| Reserved | 2024-05-03 |
| Published | 2024-05-03 |
| Updated | 2024-06-06 |
Description
Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Problem types
CWE-428 Unquoted Search Path or Element
Product status
Any version before 4.1.3
Credits
Jorge Manuel Lozano Gómez
