Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2018-20094
HistoryDec 12, 2018 - 8:00 a.m.

CVE-2018-20094

2018-12-1208:00:00
mitre
www.cve.org
2
path traversal
configuration file
confcontroller
proputil

EPSS

0.004

Percentile

75.4%

JSON

An issue was discovered in XXL-CONF 1.6.0. There is a path traversal vulnerability via …/ in the keys parameter that can download any configuration file, related to ConfController.java and PropUtil.java.

Related

nvd 1
osv 2
veracode 1
prion 1
github 1
cve 1
nvd
nvd
CVE-2018-20094
2018-12-12 10:29:00
osv
osv
XXL-CONF Path Traversal vulnerability
2018-12-19 19:25:04
CVE-2018-20094
2018-12-12 10:29:00
veracode
veracode
Directory Traversal
2018-12-13 05:44:09
prion
prion
Path traversal
2018-12-12 10:29:00
github
github
XXL-CONF Path Traversal vulnerability
2018-12-19 19:25:04
cve
cve
CVE-2018-20094
2018-12-12 10:29:00

EPSS

0.004

Percentile

75.4%

JSON
Related for CVELIST:CVE-2018-20094
nvd1osv2veracode1prion1github1cve1