CVE-2018-12909

Опубликовано: 27 июн. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Средний

Описание

Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.

Ссылки

https://github.com/jokkedk/webgrind/issues/112
Issue Tracking
Third Party Advisory
https://github.com/jokkedk/webgrind/issues/112
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webgrind_project:webgrind:1.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.15882

Средний

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-fp34-qqcc-2392

CVSS3: 7.5

github

больше 4 лет назад

** DISPUTED ** Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment."

ALT-PU-2023-8422

CVSS3: 7.5

altlinux

больше 2 лет назад

ALT-PU-2023-8422: package `webgrind` update to version 1.9.3-alt1

EPSS

Процентиль: 97%

0.15882

Средний

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-22