Directory Traversal

2018-11-0702:30:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.3%

JSON

kindeditor is vulnerable to directory traversal attacks. The vulnerability exists in php/upload_json.php where directory information can be listed in the kindeditor/attached/ folder via the path parameter.

CPENameOperatorVersion
kindeditoreq4.1.10
kind-editorle4.1.11

CPE	Name	Operator	Version
	kindeditor	eq	4.1.10
	kind-editor	le	4.1.11

References

github.com/kindsoft/kindeditor/issues/289

0.002 Low

EPSS

Percentile

57.3%

JSON

Related for VERACODE:7691