Lucene search

K
nvd[email protected]NVD:CVE-2008-1231
HistoryMar 10, 2008 - 5:44 p.m.

CVE-2008-1231

2008-03-1017:44:00
CWE-22
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.9%

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a … (dot dot) in the editor parameter.

Affected configurations

NVD
Node
jspwikijspwikiMatch2.4.104
OR
jspwikijspwikiMatch2.5.139
OR
jspwikijspwikiMatch2.5.139_beta

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.9%

Related for NVD:CVE-2008-1231