Lucene search
Veracode Vulnerability DatabaseVERACODE:8028HistoryDec 13, 2018 - 5:44 a.m.
Directory Traversal
2018-12-1305:44:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.004
Percentile
75.4%
xxl-conf-core is vulnerable to directory traversal attacks. The vulnerable exists due to the lack of sanitization on the value of pathname, allowing the download of any configuration file using the ../ characters.
References
Related
nvd
nvd
CVE-2018-20094
2018-12-12 10:29:00
osv
osv
XXL-CONF Path Traversal vulnerability
2018-12-19 19:25:04
CVE-2018-20094
2018-12-12 10:29:00
prion
prion
Path traversal
2018-12-12 10:29:00
github
github
XXL-CONF Path Traversal vulnerability
2018-12-19 19:25:04
cvelist
cvelist
CVE-2018-20094
2018-12-12 08:00:00
cve
cve
CVE-2018-20094
2018-12-12 10:29:00