Lucene search
+L

110 matches found

Prion
Prion
•added 2019/08/30 5:15 p.m.•27 views

Directory traversal

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...

5CVSS7.4AI score0.02998EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/30 4:56 p.m.•393 views

CVE-2019-15630

CVE-2019-15630 describes a directory traversal vulnerability affecting MuleSoft products: APIkit, HTTP connector, and OAuth2 Provider components in Mule Runtime 3.x/4.x and all MuleSoft API Gateway versions released before August 1, 2019. The issue permits remote attackers to read files accessibl...

7.5CVSS7.4AI score0.02998EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2019/08/30 4:56 p.m.•36 views

CVE-2019-15630

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...

7.5AI score0.02998EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/30 12:00 a.m.•10 views

CVE-2019-15630: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow...

7.5CVSS7.2AI score0.02998EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2014/11/13 12:00 a.m.•32 views

Mulesoft ESB Runtime 3.5.1 - Privilege Escalation Vulnerability

No description provided by source. Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to create an administrator user due to a lack of permissions check in the handler/securityService.rpc endpoin...

7.1AI score
SaveExploits0
zdt
zdt
•added 2014/10/28 12:00 a.m.•36 views

Mulesoft ESB Runtime 3.5.1 - Privilege Escalation Vulnerability

Exploit for jsp platform in category web applications Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to create an administrator user due to a lack of permissions check in the...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2014/10/27 12:00 a.m.•12 views

Mulesoft ESB Runtime 3.5.1 - Privilege Escalation

Mulesoft ESB Runtime 3.5.1 - Privilege Escalation...

3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2014/10/27 12:00 a.m.•38 views

Mulesoft ESB Runtime 3.5.1 - Privilege Escalation

Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to create an administrator user due to a lack of permissions check in the handler/securityService.rpc endpoint. The following HTTP request can b...

6.5CVSS5.2AI score0.08874EPSS
SaveExploits2
zdt
zdt
•added 2014/10/24 12:00 a.m.•30 views

Mulesoft ESB Runtime 3.5.1 Privilege Escalation / Code Execution Vulnerabilities

Mulesoft ESB Runtime version 3.5.1 suffers from an authenticated privilege escalation vulnerability that can lead to remote code execution. Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to...

7.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2014/10/22 12:00 a.m.•35 views

Mulesoft ESB Runtime 3.5.1 Privilege Escalation / Code Execution

Mulesoft ESB Runtime 3.5.1 Authenticated Privilege Escalation → Remote Code Execution Mulesoft ESB Runtime 3.5.1 allows any arbitrary authenticated user to create an administrator user due to a lack of permissions check in the handler/securityService.rpc endpoint. The following HTTP request can b...

0.8AI score
SaveExploits0
Rows per page
Query Builder