Arthmoor QSF-Portal index.php a path traversal

EntryHistoryDiffjsonxmlCTI

A vulnerability classified as critical was found in Arthmoor QSF-Portal. This vulnerability affects unknown code of the file index.php. The manipulation of the argument a leads to path traversal. Using CWE to declare the problem leads to CWE-22. The weakness was presented 01/06/2023 as ea4f61e23ecb83247d174bc2e2cbab521c751a7d. The advisory is available at github.com. This vulnerability was named CVE-2019-25099. Access to the local network is required for this attack. Technical details are available. There is no exploit available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment. This vulnerability is assigned to T1006 by the MITRE ATT&CK project. It is declared as not defined. As 0-day the estimated underground price was around $0-$5k. The patch is identified as ea4f61e23ecb83247d174bc2e2cbab521c751a7d. The bugfix is ready for download at github.com. It is recommended to apply a patch to fix this issue. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	46

Field

vulnerability_cvss3_meta_tempscore	2
vulnerability_cvss3_meta_basescore	2
vulnerability_cvss3_cna_basescore	1
vulnerability_cvss3_nvd_basescore	1
vulnerability_cvss2_nvd_basescore	1

Commit Conf

90%	34
70%	25
50%	13

Approve Conf

90%	34
70%	25
80%	13

ID	Commited	User	Field	Change	Remarks	Accepted	Status	C
13607218	01/29/2023	VulD...	cvss3_cna_basescore	5.5	see CVSS documentation	01/29/2023	accepted	90
13607217	01/29/2023	VulD...	cvss3_nvd_basescore	5.3	nist.gov	01/29/2023	accepted	90
13607216	01/29/2023	VulD...	cvss2_nvd_basescore	5.2	nist.gov	01/29/2023	accepted	90
13607215	01/29/2023	VulD...	cvss3_meta_tempscore	5.4	see CVSS documentation	01/29/2023	accepted	90
13607214	01/29/2023	VulD...	cvss3_meta_basescore	5.4	see CVSS documentation	01/29/2023	accepted	90
13607213	01/29/2023	VulD...	cve_cna	VulDB	nvd.nist.gov	01/29/2023	accepted	70
13607212	01/29/2023	VulD...	cvss3_cna_a	L	nvd.nist.gov	01/29/2023	accepted	70
13607211	01/29/2023	VulD...	cvss3_cna_i	L	nvd.nist.gov	01/29/2023	accepted	70
13607210	01/29/2023	VulD...	cvss3_cna_c	L	nvd.nist.gov	01/29/2023	accepted	70
13607209	01/29/2023	VulD...	cvss3_cna_s	U	nvd.nist.gov	01/29/2023	accepted	70
13607208	01/29/2023	VulD...	cvss3_cna_ui	N	nvd.nist.gov	01/29/2023	accepted	70
13607207	01/29/2023	VulD...	cvss3_cna_pr	L	nvd.nist.gov	01/29/2023	accepted	70
13607206	01/29/2023	VulD...	cvss3_cna_ac	L	nvd.nist.gov	01/29/2023	accepted	70
13607205	01/29/2023	VulD...	cvss3_cna_av	A	nvd.nist.gov	01/29/2023	accepted	70
13607204	01/29/2023	VulD...	cvss2_nvd_ai	P	nvd.nist.gov	01/29/2023	accepted	70
13607203	01/29/2023	VulD...	cvss2_nvd_ii	P	nvd.nist.gov	01/29/2023	accepted	70
13607202	01/29/2023	VulD...	cvss2_nvd_ci	P	nvd.nist.gov	01/29/2023	accepted	70
13607201	01/29/2023	VulD...	cvss2_nvd_au	S	nvd.nist.gov	01/29/2023	accepted	70
13607200	01/29/2023	VulD...	cvss2_nvd_ac	L	nvd.nist.gov	01/29/2023	accepted	70
13607199	01/29/2023	VulD...	cvss2_nvd_av	A	nvd.nist.gov	01/29/2023	accepted	70

52 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 52 results.

◂ Previous Overview Next ▸

Do you need the next level of professionalism?

Upgrade your account now!