exploitDog

CVE-2016-9177

Опубликовано: 04 нояб. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Ссылки

http://seclists.org/fulldisclosure/2016/Nov/13
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94218
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:0868
https://github.com/perwendel/spark/issues/700
Issue Tracking
Patch
Third Party Advisory
http://seclists.org/fulldisclosure/2016/Nov/13
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/94218
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:0868
https://github.com/perwendel/spark/issues/700
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sparkjava:spark:*:*:*:*:*:*:*:*

Версия до 2.5 (включая)

EPSS

Процентиль: 81%

0.01566

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2016-9177

CVSS3: 7.5

redhat

больше 9 лет назад

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

GHSA-89gc-6cw6-4vch

CVSS3: 7.5

github

больше 7 лет назад

Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI

EPSS

Процентиль: 81%

0.01566

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22