Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q9p2-wx98-924v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.

EPSS

Процентиль: 47%
0.00237
Низкий

Связанные уязвимости

CVSS3: 5.3
nvd
около 6 лет назад

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.

EPSS

Процентиль: 47%
0.00237
Низкий