CVE-2021-42052

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter

published August 16, 2022

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01109 · 65.6th percentile
Published
2022-08-16T21:29Z
EPSS history
Timeline
  • 16 AUG 21:29Z
    IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter
    cvelistv5