CVE-2019-13532CWE-22

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files…

published September 13, 2019

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03152 · 87.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-09-13T16:58Z
EPSS history
Timeline
  • 13 SEP 16:58Z
    CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files…
    cvelistv5