CVE-2021-29395

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to…

published February 4, 2022

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to download arbitrary files, including JSP source code, across the filesystem of the host of the web application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01801 · 78.4th percentile
Published
2022-02-04T18:48Z
EPSS history
Timeline
  • 04 FEB 18:48Z
    Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to…
    cvelistv5