CVE-2018-20094

An issue was discovered in XXL-CONF 1.6.0

published December 12, 2018

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

An issue was discovered in XXL-CONF 1.6.0. There is a path traversal vulnerability via ../ in the keys parameter that can download any configuration file, related to ConfController.java and PropUtil.java.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01825 · 78.6th percentile
Published
2018-12-12T08:00Z
EPSS history
Timeline
  • 12 DEC 08:00Z
    An issue was discovered in XXL-CONF 1.6.0
    cvelistv5