CVE-2019-12276

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to…

published June 5, 2019

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
57%
Percentile
99.1
In the wild
Unconfirmed
What it is

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.57099 · 99.1th percentile
Published
2019-06-05T17:30Z
EPSS history
Timeline
  • 22 SEP 03:17Z
    EPSS moved 57% → 26%
    epss
  • 06 SEP 03:12Z
    EPSS moved 54% → 24%
    epss
  • 30 AUG 16:01Z
    EPSS moved 24% → 54%
    epss
  • 29 AUG 04:46Z
    EPSS moved 54% → 24%
    epss
  • 05 JUN 17:30Z
    A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to…
    cvelistv5