CVE-2018-17934

2018-11-2721:00:00

CWE-22

icscert

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.154

Percentile

96.0%

JSON

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.

CNA Affected

[
  {
    "product": "NUUO CMS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions 3.3 and prior"
      }
    ]
  }
]