Security Advisory

CVE-2018-16836

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-09-11 16:00:00

Last updated 2024-08-05 10:32:54

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI.

← Browse all CVEs View on cve.org ↗