Researchers
Back
Ronan Kervella
Researcher from
SYSDREAM
#34235
of 60,590
8.8
Total CVSS
Vulnerabilities
·
1
PT-2017-16722
2017-03-24
8.8
CVE-2017-5869
Nuxeo
Nuxeo Platform
The issue allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the `X-File-Name` header, exploiting a directory traversal vulnerability in the file import feature.