CVE-2015-4462

2017-07-2518:00:00

mitre

www.cve.org

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the “Upload file from url” field in the file manager for professor.php.