CVE-2016-0709

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated…

published April 11, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
77%
Percentile
99.6
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. (dot dot) in a ZIP archive entry, as demonstrated by "../../webapps/x.jsp."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.77495 · 99.6th percentile
Published
2016-04-11T14:00Z
EPSS history
Timeline
  • 11 APR 14:00Z
    Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated…
    cvelistv5