← back
CVE-2017-20145

Tecrail Responsive Filemanger path traversal

CVSS 6.3 MEDIUMEPSS 0.9%CWE-22
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.3EPSS 0.9%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
25 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L