CVE-2017-10907

2017-12-2214:00:00

jpcert

www.cve.org

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors.

CNA Affected

[
  {
    "product": "OneThird CMS",
    "vendor": "SpiQe Software",
    "versions": [
      {
        "status": "affected",
        "version": "Show Off v1.85 and earlier"
      },
      {
        "status": "affected",
        "version": "Show Off v1.85 en and earlier"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN93333702/index.html

onethird.net/en/p1307.html