CVE-2023-42280 in mee-admin

Sumário

de MITRE • 21/09/2023

mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 08/09/2023
• Divulgação: 21/09/2023
• Moderação: aceite
• Entrada: VDB-240146
• CPE: pronto
• CWE: CWE-22 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00370
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-42280
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-42280
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-42280/