3 matches found
CVE-2016-1610
CVE-2016-1610 affects Micro Focus/Novell Filr (email-template feature) prior to 1.2 Security Update 3 and 2.0 Security Update 2. A directory traversal flaw allows an attacker to bypass access controls and write arbitrary files via a .. in a blob name. Impact details in the sources indicate potent...
7.5CVSS8AI score0.11501EPSS
SaveExploits4References6Affected Software1
Micro Focus Filr CSRF / XSS / Code Execution
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Micro Focus former Novell Filr Appliance vulnerable version: Filr 2 =2.0.0.421, Filr 1.2 = 1.2.0.846 fixed version: Filr 2 v2.0.0.465,...
9CVSS6.6AI score0.11501EPSS
SaveExploits4
20