exploitDog

CVE-2014-7237

Опубликовано: 16 окт. 2014

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*

Версия до 6.0.0 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.29599

Средний

6.8 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-7237

debian

больше 11 лет назад

lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windo ...

GHSA-39fr-gx5w-rfm5

github

больше 3 лет назад

lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin/upload.cgi, as demonstrated using .htaccess to execute arbitrary code.

EPSS

Процентиль: 96%

0.29599

Средний

6.8 Medium

CVSS2

Дефекты

CWE-264