CVE-2023-42280

mee-admin 1.5 is vulnerable to Directory Traversal

published September 21, 2023

CVSS
—
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01064 · 64.4th percentile
Published
2023-09-21T00:00Z
EPSS history
Timeline
  • 21 SEP 00:00Z
    mee-admin 1.5 is vulnerable to Directory Traversal
    cvelistv5