Lucene search

K
osvGoogleOSV:CVE-2017-5869
HistoryMar 24, 2017 - 2:59 p.m.

CVE-2017-5869

2017-03-2414:59:00
Google
osv.dev
4

7.2 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a … (dot dot) in the X-File-Name header.

7.2 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%