CVE-2015-4074

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla!

published September 20, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
57%
Percentile
99.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download_attachment task.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.56510 · 99.1th percentile
Published
2017-09-20T16:00Z
EPSS history
Timeline
  • 22 SEP 03:11Z
    EPSS moved 57% → 27%
    epss
  • 06 SEP 03:08Z
    EPSS moved 57% → 27%
    epss
  • 30 AUG 15:29Z
    EPSS moved 27% → 57%
    epss
  • 29 AUG 04:03Z
    EPSS moved 57% → 27%
    epss
  • 20 SEP 16:00Z
    Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla!
    cvelistv5