Lucene search
HistoryNov 25, 2013 - 7:55 p.m.
CVE-2013-3922
cve-2013-3922
gummy bear studios
ftp drive
http server
directory traversal
remote attackers
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a …%2f (encoded dot dot slash) in a GET request.
Affected configurations
Node
gummybearstudiosftp_drive_\+_http_serverRange≤1.0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| gummybearstudios:ftp_drive_\+_http_server | gummybearstudios ftp drive + http server | le | 1.0.4 |
Related
cvelist
cvelist
CVE-2013-3922
2013-11-25 19:00:00
nvd
nvd
CVE-2013-3922
2013-11-25 19:55:03
prion
prion
Directory traversal
2013-11-25 19:55:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Related for CVE-2013-3922