CVE-2019-16868

2019-09-2512:49:42

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.007

Percentile

80.5%

JSON

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter.

References

github.com/emlog/emlog/issues/48