CVE-2014-9452

Name of the Vulnerable Software and Affected Versions VDG Security SENSE (formerly DIVA) version 2.3.13

Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the default URI to images/.

Recommendations For VDG Security SENSE (formerly DIVA) version 2.3.13, consider restricting access to the images/ directory until a patch is available. As a temporary workaround, avoid using the .. (dot dot) notation in the default URI to prevent directory traversal attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.