PT-2015-4215
CVE-2014-9452
·
تاريخ النشر
2015-01-02
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
VDG Security SENSE (formerly DIVA) version 2.3.13
Description
A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the default URI to images/.
Recommendations
For VDG Security SENSE (formerly DIVA) version 2.3.13, consider restricting access to the images/ directory until a patch is available. As a temporary workaround, avoid using the .. (dot dot) notation in the default URI to prevent directory traversal attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾