Directory traversal

2020-10-0214:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.

CPENameOperatorVersion
bluditeq3.8.1

CPE	Name	Operator	Version
	bludit	eq	3.8.1

References

github.com/bludit/bludit/issues/978