CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

Directory traversal

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

CVE-2019-10257

CVE-2019-10257 affects Zucchetti HR Portal (through 2019-03-15). It is a directory traversal/path-traversal vulnerability that allows unauthenticated users to escape restricted directories (dot-dot-slash) and read files, including the application’s Java sources under /WEB-INF/classes/*.class. NVD...

PT-2019-11665

Name of the Vulnerable Software and Affected Versions: Zucchetti HR Portal versions prior to 2019-03-15 Description: The issue allows unauthenticated users to perform Directory Traversal, escaping the restricted location using dot-dot-slash notation to access files or directories elsewhere on the...

CVE-2019-10257: Improper Limitation of a Pathname to a Restricted Directory

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...