PT-2012-5619
CVE-2012-4867
·
تاريخ النشر
2012-09-06
·
تاريخ التحديث
2012-09-07
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
vtiger CRM version 5.1.0
Description
A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the
module name parameter.Recommendations
For vtiger CRM version 5.1.0, consider restricting access to the
sortfieldsjson.php file in the modules/com vtiger workflow directory until a patch is available. Avoid using the module name parameter with untrusted input to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾