Lucene search
HistoryMar 10, 2008 - 5:44 p.m.
CVE-2008-1231
cve
2008
1231
directory traversal
edit.jsp
jspwiki
remote attack
arbitrary execution
sensitive information
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.9%
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a … (dot dot) in the editor parameter.
Affected configurations
Node
jspwikijspwikiMatch2.4.104
ORjspwikijspwikiMatch2.5.139
ORjspwikijspwikiMatch2.5.139_beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| jspwiki:jspwiki | jspwiki | eq | 2.4.104 |
| jspwiki:jspwiki | jspwiki | eq | 2.5.139 |
| jspwiki:jspwiki | jspwiki | eq | 2.5.139_beta |
Related
prion
prion
Directory traversal
2008-03-10 17:44:00
cvelist
cvelist
CVE-2008-1231
2008-03-10 17:00:00
ubuntucve
ubuntucve
CVE-2008-1231
2008-03-10 00:00:00
nvd
nvd
CVE-2008-1231
2008-03-10 17:44:00
nessus
nessus
JSPWiki Edit.jsp editor Parameter Traversal Local File Inclusion
2011-12-16 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.9%
Related for CVE-2008-1231