CVE-2018-7771

The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4

published July 3, 2018

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01446 · 72.9th percentile
Published
2018-07-03T14:00Z
EPSS history
Timeline
  • 03 JUL 14:00Z
    The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4
    cvelistv5