CVE-2021-29024

In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download

published May 17, 2021

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01642 · 76.2th percentile
Published
2021-05-17T00:00Z
EPSS history
Timeline
  • 17 MAY 00:00Z
    In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download
    cvelistv5