Lucene search

K
cvelistMitreCVELIST:CVE-2014-1222
HistoryAug 12, 2014 - 11:00 p.m.

CVE-2014-1222

2014-08-1223:00:00
mitre
www.cve.org
5

AI Score

8.8

Confidence

High

EPSS

0.053

Percentile

93.1%

Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a … (dot dot) in the file parameter in a download action. NOTE: it is likely that this issue is actually in the KCFinder third-party component, and it affects additional products besides Vtiger CRM.

AI Score

8.8

Confidence

High

EPSS

0.053

Percentile

93.1%