Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-25097

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name of the patch is b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217436.

Published

2023-01-05T08:15:08.587

Last Modified

2024-11-21T04:39:55.937

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

5.1

Impact Score

6.4

Weaknesses

Type: Primary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	extplorer	extplorer	< 2.1.13	Yes

References

https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 Patch, Third Party Advisory ([email protected])
https://github.com/soerennb/extplorer/releases/tag/v2.1.13 Release Notes, Third Party Advisory ([email protected])
https://vuldb.com/?ctiid.217436 Third Party Advisory ([email protected])
https://vuldb.com/?id.217436 Third Party Advisory ([email protected])
https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/soerennb/extplorer/releases/tag/v2.1.13 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.217436 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.217436 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)