Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40981
HistoryJun 22, 2023 - 6:54 a.m.

Path Traversal

2023-06-2206:54:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
path traversal
froxlor
vulnerability
file path validation
admin_autoupdate.php
attacker
arbitrary files

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

48.7%

froxlor/froxlor is vulnerable to Path Traversal. The vulnerability exists due to a lack of file path validation in admin_autoupdate.php, which allows an attacker to access files outside the expected directory and read arbitrary files through relative paths such as \\..filename.

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

48.7%

Related for VERACODE:40981