CVE-2017-17793

2017-12-2009:29:00

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%

JSON

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).

CPENameOperatorVersion
blogotexteq3.7.0
blogotexteq3.7.2
blogotexteq3.7.6
blogotexteq3.7.5
blogotexteq3.0.0
blogotexteq3.4.8
blogotexteq3.0.0-pre
blogotexteq3.1.0
blogotexteq3.7.3
blogotexteq3.4.7

Name	Operator	Version
blogotext	eq	3.7.0
blogotext	eq	3.7.2
blogotext	eq	3.7.6
blogotext	eq	3.7.5
blogotext	eq	3.0.0
blogotext	eq	3.4.8
blogotext	eq	3.0.0-pre
blogotext	eq	3.1.0
blogotext	eq	3.7.3
blogotext	eq	3.4.7