Описание
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Ссылки
- Exploit
- Patch
- ExploitPatch
- Exploit
- Patch
- ExploitPatch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3601:linux:*:*:*:*:*
cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3601:windows:*:*:*:*:*
cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3614:linux:*:*:*:*:*
cpe:2.3:a:epic_games:unreal_tournament_3:1.3:build_3614:windows:*:*:*:*:*
EPSS
Процентиль: 89%
0.03699
Низкий
7.8 High
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 4 лет назад
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
EPSS
Процентиль: 89%
0.03699
Низкий
7.8 High
CVSS2
Дефекты
CWE-22