Directory traversal

2019-06-1914:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location (dot-dot-slash notation) to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application’s java sources from /WEB-INF/classes/*.class

CPENameOperatorVersion
hr_portaleq<= 2019315

CPE	Name	Operator	Version
	hr_portal	eq	<= 2019315

References

www.sk-it.com/en/cve.html