Lucene search

K
cveVulDBCVE-2017-20145
HistoryJul 25, 2022 - 5:15 a.m.

CVE-2017-20145

2022-07-2505:15:07
CWE-22
VulDB
web.nvd.nist.gov
24
5
cve-2017-20145
tecrail
responsive filemanager
vulnerability
path traversal
remotely exploitable
upgrade

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.6%

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component.

Affected configurations

Nvd
Vulners
Node
tecrailresponsive_filemanagerRange9.11.0
VendorProductVersionCPE
tecrailresponsive_filemanager*cpe:2.3:a:tecrail:responsive_filemanager:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Responsive Filemanger",
    "vendor": "Tecrail",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      },
      {
        "status": "affected",
        "version": "9.1"
      },
      {
        "status": "affected",
        "version": "9.2"
      },
      {
        "status": "affected",
        "version": "9.3"
      },
      {
        "status": "affected",
        "version": "9.4"
      },
      {
        "status": "affected",
        "version": "9.5"
      },
      {
        "status": "affected",
        "version": "9.6"
      },
      {
        "status": "affected",
        "version": "9.7"
      },
      {
        "status": "affected",
        "version": "9.8"
      },
      {
        "status": "affected",
        "version": "9.9"
      },
      {
        "status": "affected",
        "version": "9.10"
      }
    ]
  }
]

Social References

More

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.6%

Related for CVE-2017-20145