Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44915
HistoryJan 02, 2024 - 11:29 a.m.

Arbitrary File Read

2024-01-0211:29:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
vulnerability
file read
network configuration
http requests
attacker
files
local network
malicious link
software

6.4 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.9%

wrangler is vulnerable to Arbitrary File Read. The vulnerability is due improper network configuration which allows an attacker to access files over the local network via specially crafted HTTP requests. An attacker is able to read arbitrary files over the local network or can trick a user to click on a malicious link to access the file remotely.

CPENameOperatorVersion
wranglerle3.18.0
wranglerle3.18.0

6.4 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.9%

Related for VERACODE:44915