Lucene search
HistoryAug 16, 2022 - 11:15 p.m.
CVE-2021-42052
ipesa e-flow
path traversal
web root directory
steresource.res
r query parameter
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
62.0%
IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.
Affected configurations
Node
ipesae-flowMatch3.3.6
Related
cve
cve
CVE-2021-42052
2022-08-16 23:15:08
cvelist
cvelist
CVE-2021-42052
2022-08-16 21:29:22
prion
prion
Path traversal
2022-08-16 23:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
62.0%
Related for NVD:CVE-2021-42052