CoreCVE
Back

MEDIUM

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written

Published Oct 30, 2019

Description

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This can be an executable file that is written to in the arbitrary directory. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-22

Path Traversal

CWE-264

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner krcert
Published Oct 30, 2019
Updated Aug 5, 2024
Reserved Oct 7, 2019
Link CVE-2019-17322
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-17322
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-17322