Lucene search

[email protected]CVE-2009-1354

HistoryApr 21, 2009 - 4:24 p.m.

CVE-2009-1354

2009-04-2116:24:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2009

1354

directory traversal

vulnerability

mongoose 2.4

remote attack

arbitrary files

uri

7.4 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.021 Low

EPSS

Percentile

89.0%

JSON

Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a … (dot dot) in the URI.

CPENameOperatorVersion
sergey_lyubka:mongoosesergey lyubka mongooseeq2.4

CPE	Name	Operator	Version
sergey_lyubka:mongoose	sergey lyubka mongoose	eq	2.4

References

www.securityfocus.com/archive/1/502648/100/0/threaded

www.securityfocus.com/bid/34510

exchange.xforce.ibmcloud.com/vulnerabilities/49878

www.exploit-db.com/exploits/8428

7.4 High

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.021 Low

EPSS

Percentile

89.0%

JSON

Related for CVE-2009-1354

cvelist1 prion1