Lucene search

K
githubGitHub Advisory DatabaseGHSA-W327-WQ28-3VMF
HistoryMay 02, 2022 - 3:56 a.m.

CuteSoft CuteEditor Path Traversal vulnerability

2022-05-0203:56:59
CWE-22
GitHub Advisory Database
github.com
3
cutesoft
cuteeditor
path traversal

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.006

Percentile

78.7%

Directory traversal vulnerability in CuteSoft_Client/CuteEditor/Load.ashx in CuteSoft Components Cute Editor for ASP.NET allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected configurations

Vulners
Node
cuteeditorRange<6.6
VendorProductVersionCPE
*cuteeditor*cpe:2.3:a:*:cuteeditor:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.006

Percentile

78.7%

Related for GHSA-W327-WQ28-3VMF