3 matches found
CVE-2019-11397
GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5 allows Local File Inclusion via the FileDesc parameter...
6.5CVSS6.5AI score0.05484EPSS
SaveExploits0References2
CVE-2019-11397
The CVE-2019-11397 issue affects Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5. The GetFile.aspx handler exposes a Local File Inclusion (LFI) vulnerability via the FileDesc parameter, enabling an attacker to access local files. Impact is documented as ...
6.5CVSS6.4AI score0.05484EPSS
SaveExploits0References2Affected Software1
CVE-2019-11397: Improper Limitation of a Pathname to a Restricted Directory
GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5 allows Local File Inclusion via the FileDesc parameter...
6.5CVSS5.8AI score0.05484EPSS
SaveExploits0References2
20