CVE-2018-1000882

2018-12-2017:29:01

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

JSON

WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.

CPENameOperatorVersion
webideq1.2.2
webideq1.2.1
webideq1.2

Name	Operator	Version
webid	eq	1.2.2
webid	eq	1.2.1
webid	eq	1.2

References

bugs.webidsupport.com/view.php?id=646

github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7f

telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt