CVE-2014-2352CWE-22

Cogent DataHub Path Traversal

High · published May 30, 2014

CVSS v2.0
7.8
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

The directory specifier can include designators that can be used to

traverse the directory path. Exploiting this vulnerability may enable an

attacker to access a limited number of hardcoded file types. Further

exploitation of this vulnerability may allow an attacker to cause the

web server component to enter a denial-of-service condition.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02311 · 83.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2014-05-30T23:00Z
EPSS history
Timeline
  • 30 MAY 23:00Z
    Cogent DataHub Path Traversal
    cvelistv5