CVE-2019-15855

An issue was discovered in Maarch RM before 2.5

published January 17, 2020

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

🚨 A crafty POST request can turn your file system into a playground for attackers! Think of it like a mischievous child who bypasses the front desk to scribble over the hotel’s guest list — every room’s information is up for grabs. In this case, an unauthenticated remote attacker can overwrite files, leaving your system in disarray! This vulnerability could lead to a permanent Denial of Service, meaning your application could be rendered completely unusable. Imagine your system crashing, leaving users locked out and knocking at the door for help — absolutely devastating!

Put simply

Think of it like a mischievous child who bypasses the front desk to scribble over the hotel’s guest list — every room’s information is up for grabs. In this case, an unauthenticated remote attacker can overwrite files, leaving your system in disarray! The path traversal vulnerability in Maarch RM before version 2.5 allows attackers to exploit crafted POST requests, enabling them to overwrite critical files without any authentication.

What to do

This vulnerability could lead to a permanent Denial of Service, meaning your application could be rendered completely unusable. Imagine your system crashing, leaving users locked out and knocking at the door for help — absolutely devastating! To safeguard your system, ensure you upgrade to version 2.5 or later immediately. Additionally, review your installation procedures to verify if the default settings were followed. Regularly audit your application for similar vulnerabilities to stay one step ahead! You've got this! With a few updates, you'll have your defenses reinforced in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01508 · 74.2th percentile
Published
2020-01-17T16:38Z
EPSS history
Timeline
  • 17 JAN 16:38Z
    An issue was discovered in Maarch RM before 2.5
    cvelistv5