Lucene search

CVE-2018-13864

🗓️ 17 Jul 2018 12:00:29Reported by mitreType

A directory traversal vulnerability in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) allows remote attackers to download arbitrary files on Windows

Reporter	Title	Published	Views	Family All 7
Prion	Directory traversal	17 Jul 201812:29	–	prion
Github Security Blog	Play Framework's Assets controller vulnerable to directory traversal	13 May 202201:30	–	github
NVD	CVE-2018-13864	17 Jul 201812:29	–	nvd
OSV	Play Framework's Assets controller vulnerable to directory traversal	13 May 202201:30	–	osv
OSV	CVE-2018-13864	17 Jul 201812:29	–	osv
Veracode	Directory Traversal	17 Jul 201806:16	–	veracode
Cvelist	CVE-2018-13864	17 Jul 201812:00	–	cvelist

Nvd

Node

lightbend play_frameworkRange2.6.12–2.6.15

AND

microsoft windowsMatch-

Source	Link
playframework	www.playframework.com/security/vulnerability/CVE-2018-13864-PathTraversal

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Jul 2018 12:29Current

7.5High risk

Vulners AI Score7.5

CVSS25

CVSS37.5

EPSS0.09956

CWE-22