CVE-2018-14036

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb()…

published July 13, 2018

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03046 · 87.4th percentile
Published
2018-07-13T12:00Z
EPSS history
Timeline
  • 13 JUL 12:00Z
    Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb()…
    cvelistv5