PT-2023-11355 · Soerennb · Extplorer

CVE-2019-25097 · Publicado 2023-01-05 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions soerennb eXtplorer versions up to 2.1.12

Description A critical issue was found in the Directory Content Handler component, leading to path traversal due to manipulation of some unknown functionality. Upgrading to version 2.1.13 addresses this issue.

Recommendations For versions up to 2.1.12, upgrade to version 2.1.13 to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-25097

Produtos afetados

Extplorer

Referências · 11

• https://github.com/soerennb/extplorer/releases/tag/v2.1.13 · Correção
• https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 · Correção
• https://vuldb.com/?id.217436 · Nota
• https://ubuntu.com/security/CVE-2019-25097 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-25097 · Aviso do Fabricante
• https://vuldb.com/?ctiid.217436 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25097 · Nota de Segurança
• https://t.me/cvenotify/41287 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2019-25097 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-25097 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25097 · Nota