CVE-2017-2090
Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-04-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-22
Affected products
References
- http://jvn.jp/en/jp/JVN73182875/index.html
- http://www.securityfocus.com/bid/96429
- https://support.cybozu.com/ja-jp/article/9499
