CVE-2013-7300

Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd…

published February 2, 2014

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01537 · 74.5th percentile
Published
2014-02-02T00:00Z
EPSS history
Timeline
  • 02 FEB 00:00Z
    Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd…
    cvelistv5