CVE-2017-17793

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a…

published December 20, 2017

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02166 · 82.1th percentile
Published
2017-12-20T09:00Z
EPSS history
Timeline
  • 20 DEC 09:00Z
    Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a…
    cvelistv5