Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-4670
HistoryAug 18, 2015 - 5:59 p.m.

Directory traversal

2015-08-1817:59:00
PRIOn knowledge base
www.prio-n.com
4

7.3 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

72.9%

Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1 allows remote attackers to write to arbitrary files via a … (dot dot) in the fileId parameter to AjaxFileUploadHandler.axd.

CPENameOperatorVersion
ajax_control_toolkitle15.0

7.3 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.004 Low

EPSS

Percentile

72.9%

Related for PRION:CVE-2015-4670