CVE-2016-0784

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated…

published April 11, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
56%
Percentile
99.0
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.56314 · 99.0th percentile
Published
2016-04-11T14:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 56% → 32%
    epss
  • 06 SEP 03:09Z
    EPSS moved 56% → 32%
    epss
  • 30 AUG 15:30Z
    EPSS moved 32% → 56%
    epss
  • 29 AUG 04:08Z
    EPSS moved 56% → 32%
    epss
  • 11 APR 14:00Z
    Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated…
    cvelistv5