An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying directory traversal sequences.
Metrics
Affected Vendors & Products
References
History
Tue, 09 Jun 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An arbitrary file deletion vulnerability in the /api/delete-temp-license/{file} endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying directory traversal sequences. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-06-09T18:13:18.455Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-36726
No data.
Status : Deferred
Published: 2026-06-09T19:17:43.093
Modified: 2026-06-09T19:35:05.693
Link: CVE-2026-36726
No data.
OpenCVE Enrichment
No data.