CVE-2017-5869

Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute…

published March 24, 2017

CVSS
—
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the X-File-Name header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34585 · 98.4th percentile
Published
2017-03-24T14:00Z
EPSS history
Timeline
  • 24 MAR 14:00Z
    Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute…
    cvelistv5