CVE-2013-3921 - Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) to the default URI

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) to the default URI

Published Dec 5, 2013

5.0

MEDIUM

CVSS 2.0

EPSS 1.86%

Description

Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) to the default URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3853
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89169
vdb-entryx_refsource_XF
https://www.trustwave.com/spiderlabs/advisories/TWSL2013-033.txt
x_refsource_MISCExploit

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3853		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89169		vdb-entryx_refsource_XF
https://www.trustwave.com/spiderlabs/advisories/TWSL2013-033.txt		x_refsource_MISCExploit