Path traversal

2023-12-1509:15:00

PRIOn knowledge base

www.prio-n.com

easylog web+

path traversal

vulnerability

unauthenticated

remote attacker

bypass authentication

download

system files

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.4%

JSON

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

CPENameOperatorVersion
easylog_web\\+_firmwareeq1.13.2.8

CPE	Name	Operator	Version
	easylog_web\\+_firmware	eq	1.13.2.8

References

www.twcert.org.tw/tw/cp-132-7604-ab0fd-1.html