Directory traversal

2020-09-1103:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.

CPENameOperatorVersion
onbasege19.0.0.0
onbasele19.8.9.1000
onbasele18.0.0.32

Name	Operator	Version
onbase	ge	19.0.0.0
onbase	le	19.8.9.1000
onbase	le	18.0.0.32

References

seclists.org/fulldisclosure/2020/Oct/9

seclists.org/fulldisclosure/2020/Sep/21