CVE-2019-15714 - cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations

Back Back to CVE browser

MEDIUM

cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations

Published Aug 28, 2019

5.3

MEDIUM

CVSS 3.0

EPSS 1.82%

Description

cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6650
Advisory
https://github.com/entropic-dev/entropic/issues/251
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6650		Advisory
https://github.com/entropic-dev/entropic/issues/251		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 28, 2019

Updated Aug 5, 2024

Reserved Aug 28, 2019

Link CVE-2019-15714

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15714

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 28, 2019

Updated Aug 5, 2024

Link EUVD-2019-6650

GitHub

No data