CVE-2009-4374

2009-12-2116:00:00

mitre

www.cve.org

ossim vulnerability

directory traversal

remote attack vulnerability

arbitrary file upload

AI Score

6.9

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON

Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a … (dot dot) in the id_document parameter.