CVE-2021-35250CWE-22

Directory Transversal Vulnerability in Serv-U 15.3

High · published April 25, 2022

CVSS v3.1

7.5

EPSS

13%

Percentile

96.3

In the wild

Unconfirmed

What it is

A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.12804 · 96.3th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2022-04-25T19:47Z

EPSS history

Timeline

25 APR 19:47Z
Directory Transversal Vulnerability in Serv-U 15.3
cvelistv5