CVE-2026-112138 | diem-project diem up to 5.1.3 dmCodeEditor actions.class.php dmOs::join path traversal (Issue 451)

SecurityVulns
Yanac

A vulnerability, which was classified as problematic, was found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-112138. The attack can be launched remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More