CVE-2017-8868

acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php

published May 10, 2017

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01854 · 78.9th percentile
Published
2017-05-10T05:14Z
EPSS history
Timeline
  • 10 MAY 05:14Z
    acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php
    cvelistv5