CVE-2014-3702

Name of the Vulnerable Software and Affected Versions: eDeploy (affected versions not specified)

Description: A directory traversal issue allows remote attackers to create arbitrary directories and files, potentially causing a denial of service due to resource consumption. This is achieved by exploiting the session parameter using a .. (dot dot) sequence.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.