CVE-2019-17199

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as…

published October 5, 2019

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as demonstrated by the a.jpg\.. substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09957 · 95.6th percentile
Published
2019-10-05T19:04Z
EPSS history
Timeline
  • 05 OCT 19:04Z
    www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as…
    cvelistv5