CVE-2014-2575 in Aspxfilemanager Control For Webforms And Mvc정보

요약

\~에 의해 MITRE

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the __EVENTARGUMENT parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2014. 03. 21.

공개

2014. 06. 06.

모더레이션

수락

항목

VDB-69969

CPE

준비됨

CWE

CWE-22 (확인됨)

익스플로잇

다운로드

CVSS

6.5 (NVD)

EPSS

0.09554

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-2575
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-2575
CVE Details	https://www.cvedetails.com/cve/CVE-2014-2575/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!