CVE-2017-16038

`f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url

published June 4, 2018

CVSS
—
EPSS
3%
Percentile
84.5
In the wild
Unconfirmed
What it is

`f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by `f2e-server` requiring elevated privileges to run.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02504 · 84.5th percentile
Published
2018-06-04T19:00Z
EPSS history
Timeline
  • 04 JUN 19:00Z
    `f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url
    cvelistv5