Описание
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.
Ссылки
- Third Party AdvisoryVDB Entry
- Issue TrackingPatch
- Third Party AdvisoryVDB Entry
- Issue TrackingPatch
Уязвимые конфигурации
Конфигурация 1Версия до 2.3.9 (включая)
cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01057
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.
EPSS
Процентиль: 77%
0.01057
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-434