CVE-2017-5541

Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files…

published January 20, 2017

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02477 · 84.3th percentile
Published
2017-01-20T08:39Z
EPSS history
Timeline
  • 20 JAN 08:39Z
    Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files…
    cvelistv5