Path traversal

2022-08-1623:15:00

PRIOn knowledge base

www.prio-n.com

ipesa e-flow

path traversal

web root directory

steresource.res

r query parameter

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

JSON

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.

CPENameOperatorVersion
e-floweq3.3.6

CPE	Name	Operator	Version
	e-flow	eq	3.3.6

References

nxnjz.net/2022/08/cve-2021-42052-full-disclosure/