CVE-2017-12586

Опубликовано: 06 авг. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users.

Ссылки

https://github.com/slims/slims8_akasia/issues/48
Exploit
Third Party Advisory
https://github.com/slims/slims8_akasia/issues/48
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:slims:akasia:8.0:*:*:*:*:*:*:*

cpe:2.3:a:slims:akasia:8.1:*:*:*:*:*:*:*

cpe:2.3:a:slims:akasia:8.2:*:*:*:*:*:*:*

cpe:2.3:a:slims:akasia:8.3:*:*:*:*:*:*:*

cpe:2.3:a:slims:akasia:8.3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00327

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-p9vm-qp96-wp3x