Directory traversal

2018-12-1719:29:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

65.8%

JSON

PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.

CPENameOperatorVersion
thingworx_platformge7.0.0
thingworx_platformle7.0.14
thingworx_platformlt7.0.0
thingworx_platformge7.1.0
thingworx_platformle7.1.18
thingworx_platformge7.2.0
thingworx_platformle7.2.21
thingworx_platformge7.3.0
thingworx_platformle7.3.18
thingworx_platformge7.4.0

Name	Operator	Version
thingworx_platform	ge	7.0.0
thingworx_platform	le	7.0.14
thingworx_platform	lt	7.0.0
thingworx_platform	ge	7.1.0
thingworx_platform	le	7.1.18
thingworx_platform	ge	7.2.0
thingworx_platform	le	7.2.21
thingworx_platform	ge	7.3.0
thingworx_platform	le	7.3.18
thingworx_platform	ge	7.4.0