CVE-2012-1497

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote…

published March 3, 2012

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01291 · 69.9th percentile
Published
2012-03-03T02:00Z
EPSS history
Timeline
  • 03 MAR 02:00Z
    The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote…
    cvelistv5