CVE-2019-10242CWE-22

In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests…

published April 9, 2019

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01963 · 80.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-04-09T15:42Z
EPSS history
Timeline
  • 09 APR 15:42Z
    In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests…
    cvelistv5