CVE-2019-25097 - soerennb eXtplorer Directory Content path traversal

Back Back to CVE browser

CRITICAL

soerennb eXtplorer Directory Content path traversal

Published Jan 5, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.02%

Description

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name of the patch is b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217436.

Affected products

Vendor Soerennb Product eXtplorer Default
n/a
- Version
  2.1.0
  Status
  affected
  Constraints
  -
- Version
  2.1.1
  Status
  affected
  Constraints
  -
- Version
  2.1.10
  Status
  affected
  Constraints
  -
- Version
  2.1.11
  Status
  affected
  Constraints
  -
- Version
  2.1.12
  Status
  affected
  Constraints
  -
- Version
  2.1.2
  Status
  affected
  Constraints
  -
- Version
  2.1.3
  Status
  affected
  Constraints
  -
- Version
  2.1.4
  Status
  affected
  Constraints
  -
- Version
  2.1.5
  Status
  affected
  Constraints
  -
- Version
  2.1.6
  Status
  affected
  Constraints
  -
- Version
  2.1.7
  Status
  affected
  Constraints
  -
- Version
  2.1.8
  Status
  affected
  Constraints
  -
- Version
  2.1.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Soerennb

eXtplorer

n/a

Version	Status	Constraints
2.1.0	affected	-
2.1.1	affected	-
2.1.10	affected	-
2.1.11	affected	-
2.1.12	affected	-
2.1.2	affected	-
2.1.3	affected	-
2.1.4	affected	-
2.1.5	affected	-
2.1.6	affected	-
2.1.7	affected	-
2.1.8	affected	-
2.1.9	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11534
Advisory
https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46
patchThird Party Advisory
https://github.com/soerennb/extplorer/releases/tag/v2.1.13
patchRelease NotesThird Party Advisory
https://vuldb.com/?ctiid.217436
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217436
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-11534		Advisory
https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46		patchThird Party Advisory
https://github.com/soerennb/extplorer/releases/tag/v2.1.13		patchRelease NotesThird Party Advisory
https://vuldb.com/?ctiid.217436		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217436		vdb-entrytechnical-descriptionThird Party Advisory