CVE-2018-9205

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path

published April 4, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
55%
Percentile
99.0
In the wild
Unconfirmed
What it is

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.55079 · 99.0th percentile
Published
2018-04-04T15:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 55% → 30%
    epss
  • 06 SEP 03:12Z
    EPSS moved 56% → 30%
    epss
  • 30 AUG 16:01Z
    EPSS moved 30% → 56%
    epss
  • 29 AUG 04:43Z
    EPSS moved 56% → 30%
    epss
  • 04 APR 15:00Z
    Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path
    cvelistv5