Lucene search
HistoryFeb 02, 2014 - 12:55 a.m.
CVE-2013-7300
security
vulnerability
cantata
path traversal
cve-2013-7300
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.3%
Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301.
Affected configurations
Node
craig_drummondcantataRange≤1.2.1
ORcraig_drummondcantataMatch0.7.0
ORcraig_drummondcantataMatch0.7.1
ORcraig_drummondcantataMatch0.8.0
ORcraig_drummondcantataMatch0.8.1
ORcraig_drummondcantataMatch0.8.2
ORcraig_drummondcantataMatch0.8.3
ORcraig_drummondcantataMatch0.8.3.1
ORcraig_drummondcantataMatch0.9.0
ORcraig_drummondcantataMatch0.9.1
ORcraig_drummondcantataMatch0.9.2
ORcraig_drummondcantataMatch1.0.0
ORcraig_drummondcantataMatch1.0.1
ORcraig_drummondcantataMatch1.0.2
ORcraig_drummondcantataMatch1.0.3
ORcraig_drummondcantataMatch1.1.0
ORcraig_drummondcantataMatch1.1.1
ORcraig_drummondcantataMatch1.1.2
ORcraig_drummondcantataMatch1.1.3
ORcraig_drummondcantataMatch1.2.0
Related
nvd
nvd
CVE-2013-7300
2014-02-02 00:55:04
CVE-2013-7301
2014-02-02 00:55:04
ubuntucve
ubuntucve
CVE-2013-7300
2014-02-02 00:00:00
CVE-2013-7301
2014-02-02 00:00:00
debiancve
debiancve
CVE-2013-7300
2014-02-02 00:55:04
CVE-2013-7301
2014-02-02 00:55:04
prion
prion
Path traversal
2014-02-02 00:55:00
Information disclosure
2014-02-02 00:55:00
cvelist
cvelist
CVE-2013-7300
2014-02-02 00:00:00
CVE-2013-7301
2014-02-02 00:00:00
cve
cve
CVE-2013-7301
2014-02-02 00:55:04
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.3%
Related for CVE-2013-7300