Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-27248
HistoryApr 03, 2022 - 11:15 p.m.

Directory traversal

2022-04-0323:15:00
PRIOn knowledge base
www.prio-n.com
3

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server by specifying an absolute or relative path when invoking the affected DownloadDwg endpoint. An attack uses the path field to CaddemServiceJS/CaddemService.svc/rest/DownloadDwg.

CPENameOperatorVersion
reftreelt2021.09.17

Related

packetstorm 1
cnvd 1
nvd 1
zdt 1
cve 1
cvelist 1
packetstorm
packetstorm
IdeaRE RefTree Path Traversal
2022-03-31 00:00:00
cnvd
cnvd
IdeaRe SpA IdeaRE RefTree path traversal vulnerability
2022-04-02 00:00:00
nvd
nvd
CVE-2022-27248
2022-04-03 23:15:08
zdt
zdt
IdeaRE RefTree Path Traversal Vulnerability
2022-03-31 00:00:00
cve
cve
CVE-2022-27248
2022-04-03 23:15:08
cvelist
cvelist
CVE-2022-27248
2022-04-03 22:14:44

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON
Related for PRION:CVE-2022-27248
packetstorm1cnvd1nvd1zdt1cve1cvelist1