Lucene search

K
cve[email protected]CVE-2023-37739
HistorySep 14, 2023 - 8:15 p.m.

CVE-2023-37739

2023-09-1420:15:10
CWE-22
web.nvd.nist.gov
12
cve-2023-37739
i-doit pro
v25
path traversal
vulnerability
nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

18.8%

i-doit Pro v25 and below was discovered to be vulnerable to path traversal.

Affected configurations

NVD
Node
i-doiti-doitRange25pro
CPENameOperatorVersion
i-doit:i-doiti-doitle25

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

18.8%

Related for CVE-2023-37739