CVE-2019-3474CWE-22

Path traversal vulnerability in Filr web application

Medium · published February 20, 2019

CVSS v3.0
6.5
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.08951 · 95.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-02-20T22:00Z
EPSS history
Timeline
  • 20 FEB 22:00Z
    Path traversal vulnerability in Filr web application
    cvelistv5