CVE-2014-125068CWE-22

saxman maps-js-icoads http-server.js path traversal

Medium · published January 8, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-server.js. The manipulation leads to path traversal. The patch is named 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217643.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00670 · 51.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-01-08T10:28Z
EPSS history
Timeline
  • 08 JAN 10:28Z
    saxman maps-js-icoads http-server.js path traversal
    cvelistv5