CVE-2016-10143

Опубликовано: 20 янв. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a crafted pathname in a banner URL field.

Ссылки

http://www.securityfocus.com/bid/96787
https://dev.tiki.org/item6174
Permissions Required
https://sourceforge.net/p/tikiwiki/code/60308/
Issue Tracking
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96787
https://dev.tiki.org/item6174
Permissions Required
https://sourceforge.net/p/tikiwiki/code/60308/
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tiki:tikiwiki_cms\/groupware:15.2:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00414

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-10143

CVSS3: 7.5

debian

около 9 лет назад

A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to ...

GHSA-rv29-7fj2-265j

CVSS3: 7.5

github

больше 3 лет назад

A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a crafted pathname in a banner URL field.

EPSS

Процентиль: 61%

0.00414

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200