CVE-2019-16384

Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration

published June 4, 2020

CVSS
—
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known and the user has permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01086 · 65.0th percentile
Published
2020-06-04T15:30Z
EPSS history
Timeline
  • 04 JUN 15:30Z
    Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration
    cvelistv5