Lucene search

K
hackeroneOubsH1:924485
HistoryJul 15, 2020 - 3:19 p.m.

Mail.ru: Path traversal on bank.mail.ru ( CVE-2013-3827 )

2020-07-1515:19:18
oubs
hackerone.com
21

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.734 High

EPSS

Percentile

97.7%

Defects in Oracle’s JSF2 implementation allowed limited path traversal in tbank.mail.ru

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.734 High

EPSS

Percentile

97.7%