Lucene search

K
cvelistMitreCVELIST:CVE-2018-9110
HistoryMar 28, 2018 - 2:00 p.m.

CVE-2018-9110

2018-03-2814:00:00
mitre
www.cve.org
4

AI Score

9.3

Confidence

High

EPSS

0.004

Percentile

74.7%

Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109.

AI Score

9.3

Confidence

High

EPSS

0.004

Percentile

74.7%

Related for CVELIST:CVE-2018-9110