CVE-2019-9611

An issue was discovered in OFCMS before 1.1.3

published March 6, 2019

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversal, with ../ in the dir parameter, to write arbitrary content (in the file_content parameter) into an arbitrary file (specified by the file_name parameter). This is related to the save function in TemplateController.java.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01441 · 73.0th percentile
Published
2019-03-06T22:00Z
EPSS history
Timeline
  • 06 MAR 22:00Z
    An issue was discovered in OFCMS before 1.1.3
    cvelistv5