Lucene search

K
cvelistVulDBCVELIST:CVE-2017-20145
HistoryJul 25, 2022 - 4:45 a.m.

CVE-2017-20145 Tecrail Responsive Filemanger path traversal

2022-07-2504:45:13
CWE-22
VulDB
www.cve.org
2
tecrail filemanager
vulnerability
remote attack
path traversal
upgrade

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.6%

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component.

CNA Affected

[
  {
    "product": "Responsive Filemanger",
    "vendor": "Tecrail",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      },
      {
        "status": "affected",
        "version": "9.1"
      },
      {
        "status": "affected",
        "version": "9.2"
      },
      {
        "status": "affected",
        "version": "9.3"
      },
      {
        "status": "affected",
        "version": "9.4"
      },
      {
        "status": "affected",
        "version": "9.5"
      },
      {
        "status": "affected",
        "version": "9.6"
      },
      {
        "status": "affected",
        "version": "9.7"
      },
      {
        "status": "affected",
        "version": "9.8"
      },
      {
        "status": "affected",
        "version": "9.9"
      },
      {
        "status": "affected",
        "version": "9.10"
      }
    ]
  }
]

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.6%

Related for CVELIST:CVE-2017-20145