Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-5468
HistoryFeb 07, 2020 - 5:15 p.m.

Arbitrary file deletion

2020-02-0717:15:00
PRIOn knowledge base
www.prio-n.com
4

7.3 High

AI Score

Confidence

Low

0.497 Medium

EPSS

Percentile

97.5%

A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.

CPENameOperatorVersion
railole4.2.1.000

7.3 High

AI Score

Confidence

Low

0.497 Medium

EPSS

Percentile

97.5%