Lucene search

K
nvd[email protected]NVD:CVE-2013-7085
HistoryDec 14, 2013 - 5:21 p.m.

CVE-2013-7085

2013-12-1417:21:47
CWE-20
web.nvd.nist.gov
4

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

6.6

Confidence

Low

EPSS

0.021

Percentile

89.4%

Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.

Affected configurations

Nvd
Node
devscripts_devel_teamdevscriptsMatch2.13.5
VendorProductVersionCPE
devscripts_devel_teamdevscripts2.13.5cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

6.6

Confidence

Low

EPSS

0.021

Percentile

89.4%