Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xcjf-qmg7-c322

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information.

Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information.

EPSS

Процентиль: 35%
0.00144
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.3
nvd
почти 9 лет назад

Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information.

EPSS

Процентиль: 35%
0.00144
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22