CVE-2015-4462

Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via…

published July 25, 2017

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the "Upload file from url" field in the file manager for professor.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01104 · 65.5th percentile
Published
2017-07-25T18:00Z
EPSS history
Timeline
  • 25 JUL 18:00Z
    Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via…
    cvelistv5