Описание
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
Ссылки
- PatchVendor Advisory
- US Government Resource
- ExploitPatchVendor Advisory
- PatchVendor Advisory
- US Government Resource
- ExploitPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:wolfram_research:webmathematica:4.0_amateur:*:*:*:*:*:*:*
cpe:2.3:a:wolfram_research:webmathematica:4.0_professional:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.05668
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
EPSS
Процентиль: 92%
0.05668
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other