PT-2018-14283
CVE-2018-17934
·
Published
2018-11-27
·
Updated
2019-10-09
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NUUO CMS versions 3.3 and prior
Description
The issue allows external input to construct a pathname that can be resolved outside the intended directory. This could enable an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.
Recommendations
For versions 3.3 and prior, update to a version later than 3.3 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾