CVE-2018-0705

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests.

Score

CVSS 3.0 9.1 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Dezie (Cybozu)
• Cybozu Dezie (Cybozu Inc.)

References

• https://jvn.jp/en/jp/JVN16697622/index.html
• https://kb.cybozu.support/article/34089/