exploitDog

CVE-2018-11341

Опубликовано: 22 мая 2018

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter.

Ссылки

http://seclists.org/fulldisclosure/2018/May/2
Exploit
Mailing List
Third Party Advisory
https://github.com/mefulton/asustorexploit
Third Party Advisory
https://www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitation
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2018/May/2
Exploit
Mailing List
Third Party Advisory
https://github.com/mefulton/asustorexploit
Third Party Advisory
https://www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitation
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:asustor:as6202t_firmware:*:*:*:*:*:*:*:*

Версия до adm_3.1.0.rfq3 (включая)

cpe:2.3:h:asustor:as6202t:-:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00432

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-xj6r-gmjj-ghvc

CVSS3: 7.2

github

больше 3 лет назад

Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter.

EPSS

Процентиль: 62%

0.00432

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-22