CVE-2021-35975

Absolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101) in Systematica Radius (up to v.3.9.256.777) allows remote…

published November 30, 2023

CVSS
—
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101) in Systematica Radius (up to v.3.9.256.777) allows remote attackers to read arbitrary files via a full pathname in GET parameter "file" in URL. Also: affected components in same product - HTTP Adapter (up to v.1.8.0.15), MSSQL MessageBus Proxy (up to v.1.1.06), Financial Calculator (up to v.1.3.05), FIX Adapter (up to v.2.4.0.25)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01069 · 64.5th percentile
Published
2023-11-30T00:00Z
EPSS history
Timeline
  • 30 NOV 00:00Z
    Absolute path traversal vulnerability in the Systematica SMTP Adapter component (up to v2.0.1.101) in Systematica Radius (up to v.3.9.256.777) allows remote…
    cvelistv5