Directory traversal

2020-09-1103:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for reading files, as demonstrated by the FileName parameter.

CPENameOperatorVersion
onbasege17.0.0.0
onbasele17.0.2.109
onbasege20.0.0.0
onbasele20.3.10.1000
onbasege19.0.0.0
onbasele19.8.16.1000
onbasege18.0.0.0
onbasele18.0.0.37
onbasele16.0.2.83

Name	Operator	Version
onbase	ge	17.0.0.0
onbase	le	17.0.2.109
onbase	ge	20.0.0.0
onbase	le	20.3.10.1000
onbase	ge	19.0.0.0
onbase	le	19.8.16.1000
onbase	ge	18.0.0.0
onbase	le	18.0.0.37
onbase	le	16.0.2.83

References

seclists.org/fulldisclosure/2020/Oct/9

seclists.org/fulldisclosure/2020/Sep/21