Lucene search

K
cvelistVulDBCVELIST:CVE-2017-20145
HistoryJul 25, 2022 - 4:45 a.m.

CVE-2017-20145 Tecrail Responsive Filemanger path traversal

2022-07-2504:45:13
CWE-22
VulDB
www.cve.org

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component.

CNA Affected

[
  {
    "product": "Responsive Filemanger",
    "vendor": "Tecrail",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      },
      {
        "status": "affected",
        "version": "9.1"
      },
      {
        "status": "affected",
        "version": "9.2"
      },
      {
        "status": "affected",
        "version": "9.3"
      },
      {
        "status": "affected",
        "version": "9.4"
      },
      {
        "status": "affected",
        "version": "9.5"
      },
      {
        "status": "affected",
        "version": "9.6"
      },
      {
        "status": "affected",
        "version": "9.7"
      },
      {
        "status": "affected",
        "version": "9.8"
      },
      {
        "status": "affected",
        "version": "9.9"
      },
      {
        "status": "affected",
        "version": "9.10"
      }
    ]
  }
]

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%

Related for CVELIST:CVE-2017-20145