Directory traversal

2021-04-0716:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php.

CPENameOperatorVersion
wcmseq0.3.2

CPE	Name	Operator	Version
	wcms	eq	0.3.2

References

github.com/secwx/research/blob/main/cve/CVE-2020-24137.md

github.com/vedees/wcms/issues/7