MaDDash 2.0.2 Directory Listing

Exploit Title: MaDDash 2.0.2 - Directory Listing Date: 2018-06-18 Vendor: perfSONAR Download Link: https://github.com/esnet/maddash/archive/master.zip Version: 2.0.2 Exploit Author: ManhNho CVE: CVE-2018-12522,CVE-2018-12523,CVE-2018-12524,CVE-2018-12525 Category: Webapps Tested on: Windows 7 ---...

MaDDash 2.0.2 - Directory Listing Vulnerability

Exploit for java platform in category local exploits Exploit Title: MaDDash 2.0.2 - Directory Listing Vendor: perfSONAR Download Link: https://github.com/esnet/maddash/archive/master.zip Version: 2.0.2 Exploit Author: ManhNho CVE: CVE-2018-12522,CVE-2018-12523,CVE-2018-12524,CVE-2018-12525...

CVE-2018-12522

CVE-2018-12522 affects perfSONAR MaDDash 2.0.2. A direct request to the /style/ path exposes a directory listing, enabling information disclosure about the application’s files (e.g., /style/, /lib/, /images/, /etc/ complete index). The NVD indicates a CVSS v3.0 base score of 5.3 (MEDIUM) with net...