Path traversal

2020-06-0416:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.7%

JSON

Cybele Thinfinity VirtualUI 2.5.17.2 allows …/ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known and the user has permissions.

CPENameOperatorVersion
thinfinity_virtualuile2.5.17.2

CPE	Name	Operator	Version
	thinfinity_virtualui	le	2.5.17.2

References

labs.nettitude.com/blog/cve-2019-16384-85-cyblesoft-thinfinity-virtualui-path-traversal-http-header-injection/