PT-2018-13222 · Visiology · Visiology Flipbox Software Suite

Nenf · Publicado 2018-08-27 · Atualizado 2018-11-05 · CVE-2018-15810

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Visiology Flipbox Software Suite versions prior to 2.7.0

Description The issue allows directory traversal due to insufficient sanitization of filename parameters, specifically via %5c%2e%2e%2f.

Recommendations For versions prior to 2.7.0, update to version 2.7.0 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-15810

Produtos afetados

Visiology Flipbox Software Suite

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-15810 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15810 · Nota de Segurança
• http://flipbox.net/news/620 · Aviso do Fabricante
• https://gist.github.com/nenf/7ed2d800ca8d1538cf6bb0a771dc7dae · Nota