Back to feed
EUVD-2018-0268 · Published Jul 24, 2018
Directory Traversal in f2e-server
Affected versions of f2e-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.
Example request:
GET /../../../../../../../../../../etc/passwd HTTP/1.1
host:foo
Recommendation
Update to version 1.12.12 or later.
Technologies
F2E-Server_Project F2E-ServerF2E-Server F2E-Server
Weaknesses
CWE-22
CVSS scores
- v3.07.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
