CVE-2007-2836

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences…

published July 2, 2007

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched against an insufficiently restrictive regular expression before it is used to construct a filename that is marked for deletion at logout.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02386 · 83.7th percentile
Published
2007-07-02T19:00Z
EPSS history
Timeline
  • 02 JUL 19:00Z
    Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences…
    cvelistv5