Security Advisory

CVE-2019-18924

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-12 16:15:26
Last updated 2024-08-05 02:02:39
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.